Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8295651

JFR: 'jfr scrub' should summarize what was removed

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Fixed
    • Icon: P3 P3
    • 25
    • 20
    • hotspot
    • None
    • jfr
    • b19

      The 'jfr scrub' command can be used to remove sensitive information, such as values stored in system properties or environment variables, but there is no indication in the output of what was removed. If the user enter the wrong event name, the sensitive information may still be present.

      A workaround is to use 'jfr summary' to compare files before and after running 'jfr scrub. This is error-prone and an option users may not be aware of. Providing a summary of what was removed would give users confidence that the resulting file contains what they requested.

      Example usage:

          $ jfr scrub --exclude-events jdk.InitialSystemProperty,jdk.InitialEnvironmentVariable sensitive.jfr
          Scrubbed recording file written to:
          /Users/user/sensitive-scrubbed.jfr
          Removed events:
          jdk.InitialEnvironmentVariable 22/22
          jdk.InitialSystemProperty 14/14

            egahlin Erik Gahlin
            egahlin Erik Gahlin
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: