search

DMTF / Redfishtool

A Python34 program that implements a command line tool for accessing the Redfish API.
Other
224 stars 68 forks source link

Add Cfgfile option #67

Closed hustlzp1981 closed 5 years ago

hustlzp1981 commented 5 years ago

User and password can be read from cfgfile every time so that the password will not be appear in command line.

Signed-off-by: zhipengl zhipengs.liu@intel.com

hustlzp1981 commented 5 years ago

Could you help review my patch. If we use the –p option when invoking redfishtool then while that command is active and someone does a process listing then they can see the –p on the process listing. This is a security issue because a non-root user can learn the BMC password for any host by just doing a process listing on the active controller.

mraineri commented 5 years ago

Approved 7/11

hustlzp1981 commented 5 years ago

Thanks! BTW, do you have plan when we will release next version?