search

scVENUS / PeekabooAV-Installer

This repository provides scripts and configuration files to install, update and test a Peekaboo installation
GNU General Public License v3.0
7 stars 9 forks source link

Hardcoded database passwords #10

Closed Jack28 closed 5 years ago

Jack28 commented 5 years ago

There are hardcoded database passwords: https://github.com/scVENUS/PeekabooAV-Installer/blob/master/mysql/mysql.txt That's generally not a good idea.

https://github.com/scVENUS/PeekabooAV-Installer/blob/1b5f75752bf5f46512a1a853d868fee306a21f70/PeekabooAV-install.yml#L419

https://github.com/scVENUS/PeekabooAV-Installer/blob/1b5f75752bf5f46512a1a853d868fee306a21f70/PeekabooAV-install.yml#L427

A possible fix: https://docs.ansible.com/ansible/2.6/plugins/lookup/password.html