apport-collect SHOULD prune out /home/%USER/ from JournalErrors
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| apport (Ubuntu) |
Fix Released
|
High
|
Unassigned | ||
Bug Description
During https:/
I was happy to see that my hostname from the system logs was pruned to "hostname". Great!
However, there are some logs that complain about /home/FOO user ... we SHOULD NOT leak a user's $HOME directory contents (a potential list of local user accounts) into these reports. This MAY be considered as sensitive information.
The JournalErrors.txt should prune it.
Example of CULPRITS:
{{{
Dec 20 21:39:20 hostname com.ubuntu.
Dec 20 21:39:33 hostname com.ubuntu.
}}}
The suggestion here, is simply to also prune out usernames from ANY "/home/%USER" or "~%USER" type regexes.
| description: | updated |
| Brian Murray (brian-murray) wrote | #1 |
| Changed in apport (Ubuntu): | |
| status: | New → Incomplete |
| importance: | Undecided → High |
| tags: | added: beaver |
| tags: | added: vionic |
| tags: |
added: bionic removed: vionic |
| Brian Murray (brian-murray) wrote | #2 |
| Changed in apport (Ubuntu): | |
| status: | Incomplete → Fix Released |
To be clear I understand your issue here to be that only your username (the logged in user) was replaced in the file JournalErrors.txt and that you'd like to see every username replaced in JournalErrors.txt. Is that a correct statement?