Re: [GHC] #15371: Eventlog framework outputs environment variables which may cause a security issue

12 Jul 2018

      #15371: Eventlog framework outputs environment variables which may cause a security
issue
-------------------------------------+-------------------------------------
        Reporter:  maoe              |                Owner:  (none)
            Type:  feature request   |               Status:  new
        Priority:  normal            |            Milestone:
       Component:  Runtime System    |              Version:  8.4.3
      Resolution:                    |             Keywords:
Operating System:  Unknown/Multiple  |         Architecture:
                                     |  Unknown/Multiple
 Type of failure:  Other             |            Test Case:
      Blocked By:                    |             Blocking:
 Related Tickets:                    |  Differential Rev(s):
       Wiki Page:                    |
-------------------------------------+-------------------------------------
Description changed by maoe:

Old description:
...
The eventlog framework currently writes all environment variables to the
eventlog file. This may cause a security issue as some external tools
expect user to set credentials in environment variables. It's possible
for the user to publish an eventlog which contains credentials without
knowing it.
In general it's not a good idea to set credentials in environment
variables but I think GHC should stop writing environment variables to
the eventlog implicitly and this feature should be opt-in.
I'm not sure if this feature is widely used or if we can just drop it. If
it's used to some extend maybe we can provide a function that does this
job in a library.
New description:

 The eventlog framework currently writes all environment variables to the
 eventlog file. This may cause a security issue as some external tools
 expect user to set credentials in environment variables. It's possible for
 the user to publish an eventlog which contains credentials without knowing
 it.

 In general it's not a good idea to set credentials in environment
 variables but I think GHC should stop writing environment variables to the
 eventlog implicitly and this feature should be opt-in.

 I'm not sure if this feature is widely used or if we can just drop it. If
 it's used to some extent maybe we can provide a function that does this
 job in a library.

--

-- 
Ticket URL: http://ghc.haskell.org/trac/ghc/ticket/15371#comment:1
GHC http://www.haskell.org/ghc/
The Glasgow Haskell Compiler