[MESOS-7422] Docker containerizer should not leak possibly sensitive data to agent log.

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.3, 1.1.1
• Fix Version/s: 1.0.4, 1.1.2
• Labels: mesosphere security
• Target Version/s: 1.0.4, 1.1.2
• Epic Link: Prevent secret leaks in logs
• Sprint: Mesosphere Sprint 55
• Assignee: Till Toenshoff
• Reporter: Till Toenshoff
• Shepherd: Adam B
• Created: 25/Apr/17 01:00
• Updated: 18/May/17 16:11
• Resolved: 25/Apr/17 01:06

Description

The docker containerizer leaks environment variables which could potentially be of sensitive nature.

https://github.com/apache/mesos/blob/7341f9b3e02f5c308129f8db935f4d2388e1f4b7/src/docker/docker.cpp#L809