mirror of
https://github.com/xcat2/xcat-core.git
synced 2026-09-05 04:27:55 +00:00
Vinícius Ferrão
5fb762f2b6
Extract secret_in_request, secret_in_response and the secret sets from xcatd.pm, because the classifier and the finalizer consult them. Cover the authentication key, the privacy key and the snmpc site value reads as sensitive, the token, prodkey and site table dumps as sensitive, the nodels expansion of a secret table as sensitive, the lsvm directory listing as sensitive, and the implicit lsdef attribute listing as redacted. Keep a plain site value, a benign table, a benign object listing and a group named like a table as not sensitive. Assert that the daemon redacts each request segment alone.