Skip to content

Commit

Permalink
[MAAS] Remove snap TLS private key from report
Browse files Browse the repository at this point in the history
Remove file /var/snap/maas/current/http/certs/regiond-proxy-key.pem so
that it is not collected by sosreport

Signed-off-by: Jorge Merlino <[email protected]>
  • Loading branch information
drencrom authored and TurboTurtle committed Nov 14, 2023
1 parent 314cc50 commit 850bf47
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion sos/report/plugins/maas.py
Original file line number Diff line number Diff line change
Expand Up @@ -85,7 +85,10 @@ def setup(self):
self.add_journal(units="snap.maas.pebble", since=since)

# Don't send secrets
self.add_forbidden_path("/var/snap/maas/current/bind/session.key")
self.add_forbidden_path([
"/var/snap/maas/current/bind/session.key",
"/var/snap/maas/current/http/certs/regiond-proxy-key.pem",
])
self.add_copy_spec([
"/var/snap/maas/common/log",
"/var/snap/maas/common/snap_mode",
Expand Down

0 comments on commit 850bf47

Please sign in to comment.