[COMPASS-6072] Redact command line after startup Created: 30/Aug/22 Updated: 29/Oct/23 Resolved: 21/Sep/22 |
|
| Status: | Closed |
| Project: | Compass |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | 1.34.0 |
| Type: | Task | Priority: | Major - P3 |
| Reporter: | Anna Henningsen | Assignee: | Anna Henningsen |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Epic Link: | COMPASS-5816 |
| Story Points: | 2 |
| Documentation Changes: | Not Needed |
| Sprint: | Iteration Jellyfish, Iteration Kraken |
| Description |
|
Compass will redact its command line to avoid showing credentials in the output of ps(1) and similar tools. We will do this by overwriting process.title right after parsing CLI arguments (parseCliArgs) similarly to what we do in mongosh (It happens fairly early in mongosh, to make the window of time in which the full connection string shows up in process lists as small as possible). |
| Comments |
| Comment by Githook User [ 05/Oct/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna.henningsen@mongodb.com', 'username': 'addaleax'}Message: chore(compass): redact command line after startup |
| Comment by Githook User [ 28/Sep/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna.henningsen@mongodb.com', 'username': 'addaleax'}Message: chore(compass): redact command line after startup |
| Comment by Githook User [ 23/Sep/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna.henningsen@mongodb.com', 'username': 'addaleax'}Message: chore(compass): redact command line after startup |
| Comment by Githook User [ 21/Sep/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna.henningsen@mongodb.com', 'username': 'addaleax'}Message: chore(compass): redact command line after startup |
| Comment by Githook User [ 21/Sep/22 ] |
|
Author: {'name': 'Anna Henningsen', 'email': 'anna.henningsen@mongodb.com', 'username': 'addaleax'}Message: chore(compass): redact command line after startup |