diff options
author | Alex White <alex.white@oarcorp.com> | 2021-04-09 16:52:44 -0500 |
---|---|---|
committer | Joel Sherrill <joel@rtems.org> | 2021-12-16 15:26:39 -0600 |
commit | 6759c3ce837a43cd2047e5c162891d780fb9246d (patch) | |
tree | 21eb772e2aa6868021de3bc42fb1588fc01e40da | |
parent | rtemstoolkit/mailer.py: Return full smtp-host arg value (diff) | |
download | rtems-tools-6759c3ce837a43cd2047e5c162891d780fb9246d.tar.bz2 |
rtemstoolkit: Filter mail options from log output
This filters mail-related options out before logging the command line
options. This is needed to prevent leaking potentially sensitive
information via logs and emails.
Updates #4553
-rw-r--r-- | rtemstoolkit/options.py | 17 |
1 files changed, 16 insertions, 1 deletions
diff --git a/rtemstoolkit/options.py b/rtemstoolkit/options.py index 32a7016..5ebe3bc 100644 --- a/rtemstoolkit/options.py +++ b/rtemstoolkit/options.py @@ -508,7 +508,22 @@ class command_line(object): return None def log_info(self): - log.output(log.info(self.argv)) + # Filter potentially sensitive mail options out. + filtered_args = [ + arg for arg in self.argv + if all( + smtp_opt not in arg + for smtp_opt in [ + '--smtp-host', + '--mail-to', + '--mail-from', + '--smtp-user', + '--smtp-password', + '--smtp-port' + ] + ) + ] + log.output(log.info(filtered_args)) def load(opts): """ |