accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Christopher Tubbs (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ACCUMULO-800) don't log the instance.secret
Date Sat, 13 Oct 2012 09:05:06 GMT

    [ https://issues.apache.org/jira/browse/ACCUMULO-800?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13475557#comment-13475557
] 

Christopher Tubbs commented on ACCUMULO-800:
--------------------------------------------

This seems like a trivial fix, but could be pretty important, so I put it as a blocker for
1.4.2.
[~mdrob], can you identify which specific log message you are referring to?
                
> don't log the instance.secret
> -----------------------------
>
>                 Key: ACCUMULO-800
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-800
>             Project: Accumulo
>          Issue Type: Bug
>    Affects Versions: 1.4.1, 1.3.6
>            Reporter: Eric Newton
>            Priority: Blocker
>              Labels: newbie
>             Fix For: 1.5.0, 1.4.2
>
>
> Like passwords, logging the instance secret is probably not great for security.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message