You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@trafficcontrol.apache.org by "David Neuman (JIRA)" <ji...@apache.org> on 2017/05/15 19:29:04 UTC

[jira] [Created] (TC-293) traffic_ops_ort.pl exposes password

David Neuman created TC-293:
-------------------------------

             Summary: traffic_ops_ort.pl exposes password
                 Key: TC-293
                 URL: https://issues.apache.org/jira/browse/TC-293
             Project: Traffic Control
          Issue Type: Bug
            Reporter: David Neuman


When one runs traffic_ops_ort.pl you must provide a username and password for the TO instance on the commandline.

This exposes the password during the ort process via the process table and (on many version of Linux) will store that command in the .bash_history file.

traffic_ops_ort.pl should be modified such that when a username is provided without a password one is requested.

moving this from https://github.com/Comcast/traffic_control/issues/188



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)