7 Mar
2020
7 Mar
'20
2:45 p.m.
On 2020-03-06, Aki Tuomi aki.tuomi@dovecot.fi wrote:
- Add tool for generating sysreport called dovecot-sysreport. =C2=A0 This generates a bundle of information usually needed for support =C2=A0 requests.
This goes to some lengths to remove passwords in dovecot config files, but it includes userdb/passdb files in the archive which can include passwords (possibly hashed, possibly not, either way still sensitive).
(Also it relies on GNU extensions to grep and tar - would it be worth converting those parts to perl/python instead, because it already relies on them in order to actually hide the passwords?)