Attila Sasvari created OOZIE-2853:
-------------------------------------

             Summary: Printing out Sqoop Configuration Properties may reveal 
passwords
                 Key: OOZIE-2853
                 URL: https://issues.apache.org/jira/browse/OOZIE-2853
             Project: Oozie
          Issue Type: Bug
            Reporter: Attila Sasvari


Sample from Oozie launcher's log:
{code}
Sqoop Configuration Properties:
------------------------
...
oozie.sqoop.args.5=--password
oozie.sqoop.args.6=examplPassword
{code}

[SqoopMain|https://github.com/apache/oozie/blob/branch-4.3/sharelib/sqoop/src/main/java/org/apache/oozie/action/hadoop/SqoopMain.java#L156]
 prints out hadoop configuration that may contain sensitive information.

Note: Sqoop command arguments are redacted.
{code}
Sqoop command arguments :
...
             --password
             ********
{code}



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to