diff options
| author | Alex Harpin <development@landsofshadow.co.uk> | 2015-06-18 20:51:21 +0100 |
|---|---|---|
| committer | Alex Harpin <development@landsofshadow.co.uk> | 2015-06-18 21:15:52 +0100 |
| commit | 94974f387b363a469028f5ea01a0a7940086aa29 (patch) | |
| tree | e9724663aa6c3cc4da5e7c41964a2cc3da8ec0fb /scripts | |
| parent | 53b091e72017a6a1209aaac6a76728fb08f90665 (diff) | |
| download | vyatta-op-94974f387b363a469028f5ea01a0a7940086aa29.tar.gz vyatta-op-94974f387b363a469028f5ea01a0a7940086aa29.zip | |
vyatta-op: remove user login public key information with strip-private
Extend the strip-private command pipe so that it removes the public key
user login information.
Bug #567 http://bugzilla.vyos.net/show_bug.cgi?id=567
Diffstat (limited to 'scripts')
| -rw-r--r-- | scripts/vyos-strip-config.pl | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/scripts/vyos-strip-config.pl b/scripts/vyos-strip-config.pl index 5b0d8d9..a1e2f23 100644 --- a/scripts/vyos-strip-config.pl +++ b/scripts/vyos-strip-config.pl @@ -69,6 +69,7 @@ my $stripASN = undef; my $stripLLDP = undef; my $stripSNMP = undef; my $keepPasswords = undef; +my $keepKeys = undef; my $input = undef; GetOptions( @@ -85,7 +86,8 @@ GetOptions( "asn" => \$stripASN, "lldp" => \$stripLLDP, "snmp" => \$stripSNMP, - "keep-passwords" => \$keepPasswords + "keep-passwords" => \$keepPasswords, + "keep-keys" => \$keepKeys ); $strict = 0 if $loose; @@ -127,6 +129,11 @@ if ($stdin) { # Strip passwords $input =~ s/password \S+/password xxxxxx/g if !($keepPasswords); +# Strip public key information +$input =~ s/public-keys \S+/public-keys xxxx\@xxx.xxx/g if !($keepKeys); +$input =~ s/(type 'ssh-rsa'|type 'ssh-dss')/type ssh-xxx/g if !($keepKeys); +$input =~ s/ key \S+/ key xxxxxx/g if !($keepKeys); + # Strip MAC addresses $input =~ s/([0-9A-F]{2}\:){3}([0-9A-F]{2}((\:{0,1})){3})/XX:XX:XX:$2/gi if $stripMAC; |