- Notifications
You must be signed in to change notification settings - Fork 818
Closed
Labels
BugAn error, flaw, misbehavior or failure in the Monkey or Monkey Island.An error, flaw, misbehavior or failure in the Monkey or Monkey Island.Complexity: LowImpact: HighSecurity
Milestone
Description
Describe the bug
It seems that we are leaking OTP in Hadoop payload logging
To Reproduce
Steps to reproduce the behavior:
- Configure the Monkey with Hadoop plugin
- Run the monkey on any hadoop machine
- Observe logs
Expected behavior
We shouldn't be logging OTP.
Screenshots
Machine version (please complete the following information):
- OS: Windows or Linux
Tasks
- Fix up logging level in Hadoop plugin
- Do not forget to rebuild the plugin
- Fix the regex in OTPFormatter
- Store the OTP character set in
commonand use it inOTPFormatterandAuthenticationFacade.generate_otp() - Compile regexes as class variables so they don't need to be recompiled for every single log message
- Store the OTP character set in
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
BugAn error, flaw, misbehavior or failure in the Monkey or Monkey Island.An error, flaw, misbehavior or failure in the Monkey or Monkey Island.Complexity: LowImpact: HighSecurity
