YunoHost-Apps / opensondage_ynh

OpenSondage for YunoHost
https://framadate.org/
GNU Affero General Public License v3.0
16 stars 14 forks source link

Opensondage leaks usernames while installing a different ynh-app #83

Open chbmeyer opened 2 years ago

chbmeyer commented 2 years ago

Describe the bug

I had a problem with a different ynh-app, so I wanted to share the logfiles to yunoshare. Sadly the logfiles contained the usernames of all ynh users because they are included in an opensondage-script output. Because of that I wasn't willing to submit the logfiles.

Context

Steps to reproduce

I don't know if that is necessary. However:

Then the peertube - mailman error occured and I wanted to share the logfiles.

Expected behavior

Logfiles should be save to share. Because of that the domainnames are substituted an I think even usernames are sensitive and should not be public exposed.

Logs

This is the content of the log copied to yunoshare. I replaced the usernames by user1, user2, ...

2022-04-04 22:54:34,082: INFO - Installing peertube...
2022-04-04 22:54:34,351: DEBUG - Nothing to update in LDAP
2022-04-04 22:54:34,352: DEBUG - Permission 'peertube.main' updated
2022-04-04 22:54:34,579: DEBUG - To view the log of the operation 'Update URL related to permission 'peertube'', use the command 'yunohost log show 20220404-205434-permission_url-peertube'
2022-04-04 22:54:35,041: DEBUG - The permission database has been resynchronized
2022-04-04 22:54:35,324: DEBUG - SSOwat configuration regenerated
2022-04-04 22:54:35,578: DEBUG - Executing command '['sh', '-c', '/bin/bash -x "./50-opensondage" peertube user1,moblizon_notifs,user2,user3,user4,user5,user6 main all_users 7>&1']'
2022-04-04 22:54:35,589: DEBUG - + source /usr/share/yunohost/helpers
2022-04-04 22:54:35,589: DEBUG - +++ set +o
2022-04-04 22:54:35,590: DEBUG - +++ grep xtrace
2022-04-04 22:54:35,591: DEBUG - ++ readonly 'XTRACE_ENABLE=set -o xtrace'
2022-04-04 22:54:35,591: DEBUG - ++ XTRACE_ENABLE='set -o xtrace'
2022-04-04 22:54:35,617: DEBUG - + app=peertube
2022-04-04 22:54:35,617: DEBUG - + added_users=user1,moblizon_notifs,user2,user3,user4,user5,user6

Thank you Christian