Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release configreport 0.2.2 #194

Closed
4 tasks
jnweiger opened this issue Aug 8, 2023 · 3 comments · Fixed by #195
Closed
4 tasks

Release configreport 0.2.2 #194

jnweiger opened this issue Aug 8, 2023 · 3 comments · Fixed by #195
Assignees
Milestone

Comments

@jnweiger
Copy link
Contributor

jnweiger commented Aug 8, 2023

Reason

@jnweiger jnweiger self-assigned this Aug 8, 2023
@jnweiger jnweiger added this to the QA milestone Aug 8, 2023
@jnweiger jnweiger changed the title Release configreport 0.22 Release configreport 0.2.2 Aug 8, 2023
@jnweiger
Copy link
Contributor Author

jnweiger commented Aug 8, 2023

@jnweiger
Copy link
Contributor Author

jnweiger commented Aug 9, 2023

Changlog testing

  • Hide mount passwords #183
    • configreport with WND mounts configured in collaborative mode leaked service account password.
    • It should also hide client secrets for oauth2 services (gdrive and dropbox), and the private key for sftp.
    • Report generated via occ configreport:generate does not have a phpinfo section and nothing about the environment.
    • Report downloaded via web UI has also phpinfo, which may have environmental data:
      • environment variables from a dockerized system are not exposed e.g. OWNCLOUD_ADMIN_PASSWORD (entire section "Environment" is gone in 0.2.2)
      • Section "Apacche Environment" contains no credential.

@jnweiger
Copy link
Contributor Author

jnweiger commented Aug 9, 2023

QA passed. Github release (only) done. Ready for inclusion in 10.13.0

https://github.com/owncloud/configreport/releases/download/v0.2.2/configreport-0.2.2.tar.gz

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant