Details
-
New Feature
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Duplicate
-
None
Description
Logging of commands in slow and general query log exposes passwords.
The request would be to be able to parse the commands that contain passwords and obfuscate them.
There are other reports but could not find one specific for Slow and General query log, like https://jira.mariadb.org/browse/MDEV-24032
MariaDB [(none)]> CREATE USER 'admin'@'%' identified by 'secret_password';
|
Query OK, 0 rows affected (0,002 sec)
|
|
|
# tail -2 data/fedora.log
|
|
|
250122 15:30:11 66 Query CREATE USER 'admin'@'%' identified by 'secret_password'
|
0 Query INSERT INTO mysql.password_reuse_check_history(hash) values (x'3108EBE98A1374B68F919C3674E0FEBCCC438624B5A254F2605ED3D578A8FD02FA50919FFED17F4361C90ECF92B56E69D26BDA38BB3DC1AE4673F905BB73307D')
|
250122 15:30:12 66 Quit
|
|
|
# tail -1 data/fedora-slow.log
|
CREATE USER 'admin'@'%' identified by 'secret_password';
|
Attachments
Issue Links
- duplicates
-
-
- Open
-