ambitus / pyracf

Python interface to the RACF Command interface.
https://ambitus.github.io/pyracf/
Apache License 2.0
10 stars 4 forks source link

Feature Request: Improve Additional Secrets Redaction #68

Open ElijahSwiftIBM opened 8 months ago

ElijahSwiftIBM commented 8 months ago

Is your feature request related to a problem? Please describe. Additional Secrets Redaction is currently marked experimental because messages returned by IRRSMO00 from RACF can contain the redacted content. Additionally the regex implementation of the redaction is not exhaustive and seems that it could be error prone if the weaknesses of it were deliberately exploited.

Describe the solution you'd like Error messages containing redacted content should also be redacted. Redaction should be employed in a way to minimize false positives and guarantee redaction of the target pattern.

Describe alternatives you've considered No alternatives as there is no defined implementation for this

Additional context N/A