zero_sensitive - hiding sensitive command line information
"Dan Langille" <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <[email protected]> |
Hello, I'm told that line 00374 at http://www.net-snmp.com/dev/agent/snmp__parse__args_8c-source.html is an example of how net-snmp hides sensitive data supplied on the command line. I'm trying to figure out why this is not occurring on the hosts I've been looking at, running FreeBSD 12. I can see the passphrases, e.g. $ ps auwwx | egrep -e 'snmpget|snmpbulkwalk' www 97729 0.0 0.0 0 16 - REJ 18:49 0:00.07 /usr/local/bin/snmpget -v3 -l authPriv -n -a SHA -A UJ3RAYUc3Gh8AQjf -u roUsers -x AES -X x2rRs3B35Mntnb2p -Oqv -M /usr/local/www/librenms/mibs udp:knew.example.org:161 .1.3.6.1.4.1.7465.20.2.9.1.2.1.3.1.2 www 97730 0.0 0.0 21552 9800 - RJ 18:49 0:00.04 /usr/local/bin/snmpbulkwalk -v3 -l authPriv -n -a SHA -A UJ3RAYUc3Gh8AQjf -u roUsers -x AES -X x2rRs3B35Mntnb2p -OQUst -m IF-MIB -M /usr/local/www/librenms/mibs udp:knew.example.org:161 ifInDiscards $ [the passphrases shown above have been modified before pasting] Is this a known issue related to FreeBSD? -- Dan Langille [email protected] _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users