Uploaded image for project: 'Traffic Control'
  1. Traffic Control
  2. TC-293

traffic_ops_ort.pl exposes password

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • Traffic Ops ORT
    • None

    Description

      When one runs traffic_ops_ort.pl you must provide a username and password for the TO instance on the commandline.

      This exposes the password during the ort process via the process table and (on many version of Linux) will store that command in the .bash_history file.

      traffic_ops_ort.pl should be modified such that when a username is provided without a password one is requested.

      moving this from https://github.com/Comcast/traffic_control/issues/188

      Attachments

        Activity

          People

            Unassigned Unassigned
            neuman David Neuman
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: