mirror of
https://github.com/xcat2/xcat-core.git
synced 2026-09-26 17:54:05 +00:00
65f7b21265
Only syslog received the redacted arguments. The auditlog table was given the raw string, so a password removed from syslog and from commands.log was still written to the database, which persists and is readable by anything with access to it. Use the redacted text for both. This also covers the mkvm --password and -w masking a few lines above, which the table did not have either.