Skip to content

Sanitize env.txt#301

Merged
g23guy merged 1 commit intoopenSUSE:devfrom
wtmpx:patch-17
Apr 13, 2026
Merged

Sanitize env.txt#301
g23guy merged 1 commit intoopenSUSE:devfrom
wtmpx:patch-17

Conversation

@wtmpx
Copy link
Copy Markdown
Contributor

@wtmpx wtmpx commented Mar 26, 2026

I noticed in recent supportconfig I got, that env.txt contains credential information about the proxy if used:

scc_aas15sp7_260326_1156/env.txt:https_proxy=http://MY_USER:MY_PASSWORD@111.120.111.132:8080 scc_aas15sp7_260326_1156/env.txt:http_proxy=http://MY_USER:MY_PASSWORD@111.120.111.132:8080 scc_aas15sp7_260326_1156/env.txt:ftp_proxy=http://MY_USER:MY_PASSWORD@111.120.111.132:8080 scc_aas15sp7_260326_1156/sysconfig.txt:HTTP_PROXY="http://REMOVED BY SUPPORTCONFIG@111.120.111.132:8080" scc_aas15sp7_260326_1156/sysconfig.txt:HTTPS_PROXY="http://REMOVED BY SUPPORTCONFIG@111.120.111.132:8080" scc_aas15sp7_260326_1156/sysconfig.txt:FTP_PROXY="http://REMOVED BY SUPPORTCONFIG@111.120.111.132:8080"

To reproduce: add something to sysconfig/proxy and run: supportconfig -m -i SYSCONFIG,ENV the data in sysconfig.txt is removed, but env contains the username/password.

Also I noticed with: supportconfig -m it doesn't include env.txt

I noticed in recent supportconfig I got, that env.txt contains credential information about the proxy if used: 

scc_aas15sp7_260326_1156/env.txt:https_proxy=http://MY_USER:MY_PASSWORD@172.20.1.32:8080
scc_aas15sp7_260326_1156/env.txt:http_proxy=http://MY_USER:MY_PASSWORD@172.20.1.32:8080
scc_aas15sp7_260326_1156/env.txt:ftp_proxy=http://MY_USER:MY_PASSWORD@172.20.1.32:8080
scc_aas15sp7_260326_1156/sysconfig.txt:HTTP_PROXY="http://*REMOVED BY SUPPORTCONFIG*@172.20.1.32:8080"
scc_aas15sp7_260326_1156/sysconfig.txt:HTTPS_PROXY="http://*REMOVED BY SUPPORTCONFIG*@172.20.1.32:8080"
scc_aas15sp7_260326_1156/sysconfig.txt:FTP_PROXY="http://*REMOVED BY SUPPORTCONFIG*@172.20.1.32:8080"

To reproduce: add something to sysconfig/proxy and run: supportconfig -m -i SYSCONFIG,ENV 
the data in sysconfig.txt is removed, but env contains the username/password. 

Also I noticed with: supportconfig -m it doesn't include env.txt
@g23guy g23guy merged commit 3d1bfd9 into openSUSE:dev Apr 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants