From a98b94f80ececa27b45946c59976212581e2cd47 Mon Sep 17 00:00:00 2001
From: Adrian-Ken Rueegsegger <ken@codelabs.ch>
Date: Tue, 1 Dec 2015 12:10:27 +0100
Subject: [PATCH] run: Pass AMT log password via environment variable

This avoids exposing the cleartext AMT password in the log output.
---
 tool/run/log/amt | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/tool/run/log/amt b/tool/run/log/amt
index cb48390067..102c481814 100644
--- a/tool/run/log/amt
+++ b/tool/run/log/amt
@@ -34,10 +34,15 @@ proc run_log { wait_for_re timeout_value } {
 		return false
 	}
 
+	#
+	# amttool expects in the environment variable AMT_PASSWORD the password
+	#
+	set ::env(AMT_PASSWORD) [log_amt_password]
+
 	#
 	# grab output
 	#
-	set amt_cmd "amtterm -u admin -p [log_amt_password] -v [log_amt_host]"
+	set amt_cmd "amtterm -u admin -v [log_amt_host]"
 	if {[get_cmd_switch --log-amt-filter]} {
 		set amt_cmd "$amt_cmd | [log_amt_filter]"
 	}