cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Flexera beginner

powershell custom action is logging sensitive information MSI

Hi All,

From an MSI project , I am using a powershell custom action, stored in binaryTable in a deferred execution. I was able to hide the sensitive information being passed to the customaction successfully. But the issue is with the installshield, having its clr log at the same time.. which ends up exposing the sensitive information like in this sample

 

 

InstallShield: Attempting to load through CLR 4 APIs...
InstallShield: Getting meta host...
InstallShield: Enumerating available runtimes...
InstallShield: Highest available runtime: v4.0.30319
InstallShield: Trying to use highest runtime...
InstallShield: Using highest version runtime...
InstallShield: Ignoring CustomActionData substring "<sensitive info>"
InstallShield: Deferred action requested property MsiHiddenProperties not provided by CustomActionData
InstallShield: Deferred property "<sensitive info>"
InstallShield: Loading assembly ClrPsHelper from resource 4097
InstallShield: Calling method with parameters [(System.UInt32)149....

 

 

how to stop the IS from exposing this?

 

thanks in advance

Labels (1)
Tags (2)
0 Kudos
3 Replies
Highlighted
Flexera
Flexera

Re: powershell custom action is logging sensitive information MSI

Hi @manomatt ,

How are you passing information custom action? May be you can write in steps to get more clarity!!Attach complete log file as well.

Thanks,

Jenifer

0 Kudos
Highlighted
Flexera beginner

Re: powershell custom action is logging sensitive information MSI

hi @Jenifer 

I am using customactiondata property to pass the property values into the deferred CA. Inorder to hide sensitive information showing up in logs i added the property value to MsiHiddenProperty also updated the CA type to 8192 as mentioned in here

my CA is successful in hiding the property, but from the installshields some custom logging that gets into the log file which is exposing the passed in value as show below

MSI (s) (B0:64) [06:50:03:945]: Executing op: CustomActionSchedule(Action=testLogging,ActionType=11265,Source=BinaryData,Target=**********,CustomActionData=**********)
MSI (s) (B0:60) [06:50:03:945]: Invoking remote custom action. DLL: C:\windows\Installer\MSI912C.tmp, Entrypoint: m5
MSI (s) (B0:5C) [06:50:03:945]: Generating random cookie.
MSI (s) (B0:5C) [06:50:03:960]: Created Custom Action Server with PID 336 (0x150).
MSI (s) (B0:B8) [06:50:03:976]: Running as a service.
MSI (s) (B0:B8) [06:50:03:976]: Hello, I'm your 64bit Elevated Non-remapped custom action server.
InstallShield: Attempting to load through CLR 4 APIs...
InstallShield: Getting meta host...
InstallShield: Enumerating available runtimes...
InstallShield: Highest available runtime: v4.0.30319
InstallShield: Trying to use highest runtime...
InstallShield: Using highest version runtime...
InstallShield: Ignoring CustomActionData substring "1"
InstallShield: Deferred action requested property MsiHiddenProperties not provided by CustomActionData
InstallShield: Deferred property iiswebsitename="Default"
InstallShield: Loading assembly ClrPsHelper from resource 4097
InstallShield: Calling method with parameters [(System.UInt32)1604, (System.String)C:\Users\installshieldadmin\AppData\Local\Temp\3a142f39-62c8-41d2-b7e1-e5beb3d14a31\logger.ps1]
PowerShell wrapper: Ignoring CustomActionData substring "1"
PowerShell wrapper: Deferred action requested property MsiHiddenProperties not provided by CustomActionData
PowerShell wrapper: Deferred property iiswebsitename="Default"
PowerShell wrapper: this is a test CA

 

attached logs from my sample test where the CA is testLogging

 

 

0 Kudos
Highlighted
Flexera beginner

Re: powershell custom action is logging sensitive information MSI

Hi @Jenifer,
Any update on this bug?? Please let us know.
Thanks in advance.
0 Kudos