** Description changed:

  [IMPACT]
  
  Canonical support is about to offer SOSCleaner project for UA customer
  who wants to obfuscate sensible data from an existing sosreport tarball
  such as user, hostname, network information obfuscation.
  
  For user obfuscation, currently SOSCleaner relies on what sosreport
  offers which is "lastlog", reporting all user regardless of their UID.
  
  Unfortunately, this generate a lot of false positives (and require a
  significant ignored_users list) inside SOSCleaner especially for user in
  the UID range 0-999 (e.g.'sys', 'bin', 'syslog', and much more)
  
  I have submitted a PR in sosreport upstream in order to split lastlog
  output by UID ranges, in order to help SOSCleaner to obfuscate what we
  really want to obfuscate and ignore the rest.
  
  https://github.com/sosreport/sos/issues/1743
  https://github.com/sosreport/sos/pull/1770
  
  Once approved upstream, I'd like to push that change in E/D/B/X in order
  to unblock the development of the tool "SOSCleaner" which unfortunately
  won't land in the archive for now, will be offered in a Private PPA.
  Note that the plan is for the package to land in the Ubuntu archive in
  the near future (few months still) and this change will highly impact
  the delay if this fix doesn't land in sosreport (Ubuntu archive).
  
  [TEST CASE]
  
  * Install sosreport
   ** Run sosreport:
   - sosreport -a
  * Install soscleaner
   ** Run soscleaner:
   - soscleaner /tmp/sosreport-<TARBALL>
  * Make sure only user in the 1000-60000 UID range are obfuscated.
  
  [REGRESSION POTENTIAL]
  - None, sosreport will still collect the entire lastlog (current behavior), 
we are not removing that behaviour, we simply add an alternative which is not 
costly for typical systems.
  
  [OTHER INFO]
  
+ * Upstream fix not merged yet, but +1 by maintainers:
  https://github.com/sosreport/sos/issues/1743
  https://github.com/sosreport/sos/pull/1770

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1842489

Title:
  Update sosreport [last] plugin

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sosreport/+bug/1842489/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to