<<

# sanitizeme.pl

- NAME
- SYNOPSIS
- DESCRIPTION
- OPTIONS
  - --execute
  - --keep-attachments
  - --keep-passwords
  - --keep-insider
  - --keep-group-bugs
  - --keep-groups
  - --enable-email
  - --dry-run
  - --from-cron
  - --trace
- POD ERRORS

# NAME

sanitizeme.pl - remove sensitive information from a Bugzilla database

# SYNOPSIS

       perl scripts/sanitizeme.pl [options]

# DESCRIPTION

The sanitizeme.pl script removes the following things from the BMO database. It is assumed that everything not removed here is sanitized. Sanitized for the purposes of this document means "ready to deployed to the staging and development environments"

1. user password hashes are cleared (unless --keep-passwords is given)
2. User API keys, session tokens, and other data that can be used for authentication are removed.
3. private products (products that aren't visible when you're not logged in, e.g. Legal or Marketing)
4. security bugs (which are bugs that belong to a group)
5. private attachments, or attachments on bugs that are security bugs
6. All attachment *data* is removed. This means the /content/ of all attachments is deleted, but the name remains (except as mentioned above).
7. request logs (last bug visit, user_request_log, audit log)
8. Saved searches are removed.
9. comments (insider group comments, and deleted comments)

# OPTIONS

The following options influence the behavior of this script

## --execute

When present, the script actually makes changes to the DB. Without this option, no changes will be made.

## --keep-attachments

Disables removal of attachment content (unless --keep-attachments is given)

## --keep-passwords

Disable resetting passwords (unless --keep-passwords is given)

## --keep-insider

Disable removal of insider comments and attachments (unless --keep-insider is given)

## --keep-group-bugs

Disable removal of the specified groups and associated bugs (unless --keep-group-bugs is given)

## --keep-groups

Disable removal of group definitions (unless --keep-groups is given)

## --enable-email

Do not disable email for all users

## --dry-run

Do not update the database, just output what will be deleted

## --from-cron

Quite mode - suppress non-warning/error output

## --trace

Output sql statements

# POD ERRORS

Hey! The above document had some coding errors, which are explained below:

Around line 329:

  You have '=item 9' instead of the expected '=item 8'

Around line 333:

  You have '=item 10' instead of the expected '=item 9'

<<