sosreport / sos

A unified tool for collecting system logs and other debug information
http://sos.rtfd.org
GNU General Public License v2.0
507 stars 544 forks source link

[virsh] may collect SPICE passwords in virt-manager logs #3181

Closed brozs closed 1 year ago

brozs commented 1 year ago

The virsh plugin collects the following files/paths:

        "/root/.cache/virt-manager/*.log"
        "/root/.virt-manager/*.log"

This log contains virtual machine XML changes made by virt-manager, including password changes of Display Spice:

:
diff:
--- Original XML
+++ New XML
@@ -98,7 +98,7 @@
     </input>
     <input type="mouse" bus="ps2"/>
     <input type="keyboard" bus="ps2"/>
-    <graphics type="spice" autoport="yes" passwd="test">
+    <graphics type="spice" autoport="yes">
       <listen type="address"/>
     </graphics>
     <sound model="ich6">
:
brozs commented 1 year ago

Working on a patch...