Description of problem:
If passwords are passed to IPA commands, they are visible in the "ps" output
for all users/processes on the same host. For security reasons, the passwords
in command line arguments should be overridden. For example, "mysql" does this.
Version-Release number of selected component (if applicable):
freeipa-server-4.4.0-0.fc24.x86_64
How reproducible:
Always
Steps to Reproduce:
1. Open two consoles: One as root, one as a user.
2. Run on the first console an ipa command that uses a password as argument.
For example:
   # ipa-replica-install --principal admin --password admin_password
3. On the second console, run "ps axf" while the command on the first is
running.
Actual results:
Normal users and processes on the same host are able to see the password in the
process list:
[user@server ~]$ ps axf
...
  464 ?        Ss     0:00 /usr/sbin/sshd
  564 ?        Ss     0:00  \_ sshd: root [priv]
  927 ?        S      0:00  |   \_ sshd: root@pts/1
  937 pts/1    Ss     0:00  |       \_ -bash
 1113 pts/1    R+     0:00  |           \_ /usr/bin/python2 -E
/usr/sbin/ipa-replica-install --principal admin --password admin_password
Expected results:
IPA should override at least the password argument (better usernames, too). For
example:
[user@server ~]$ ps axf
...
 1113 pts/1    R+     0:00  |           \_ /usr/bin/python2 -E
/usr/sbin/ipa-replica-install --principal xxxxxxxx --password xxxxxxxx