Re: zero_sensitive - hiding sensitive command line information
"Dan Langille" <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <[email protected]> |
On Mon, May 11, 2020, at 10:46 AM, Dan Langille wrote: > Hello, > > I'm told that line 00374 at > http://www.net-snmp.com/dev/agent/snmp__parse__args_8c-source.html is > an example of how net-snmp hides sensitive data supplied on the command > line. > > I'm trying to figure out why this is not occurring on the hosts I've > been looking at, running FreeBSD 12. I can see the passphrases, e.g. > > $ ps auwwx | egrep -e 'snmpget|snmpbulkwalk' > www 97729 0.0 0.0 0 16 - REJ 18:49 0:00.07 > /usr/local/bin/snmpget -v3 -l authPriv -n -a SHA -A UJ3RAYUc3Gh8AQjf -u > roUsers -x AES -X x2rRs3B35Mntnb2p -Oqv -M /usr/local/www/librenms/mibs > udp:knew.example.org:161 .1.3.6.1.4.1.7465.20.2.9.1.2.1.3.1.2 > www 97730 0.0 0.0 21552 9800 - RJ 18:49 0:00.04 > /usr/local/bin/snmpbulkwalk -v3 -l authPriv -n -a SHA -A > UJ3RAYUc3Gh8AQjf -u roUsers -x AES -X x2rRs3B35Mntnb2p -OQUst -m IF-MIB > -M /usr/local/www/librenms/mibs udp:knew.example.org:161 ifInDiscards > $ > > [the passphrases shown above have been modified before pasting] > > Is this a known issue related to FreeBSD? Checking my notes, I have seen this redaction on FreeBSD. I forgot about that. Sorry. Sometimes it is redacted, sometimes it is not. I think this is a race condition. -- Dan Langille [email protected] _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users