[asterisk-commits] russell: branch 1.2 r58896 - /branches/1.2/SECURITY

[asterisk-commits at lists.digium.com]

Author: russell
Date: Wed Mar 14 11:38:48 2007
New Revision: 58896

URL: http://svn.digium.com/view/asterisk?view=rev&rev=58896
Log:
Add a note to the security file that the Asterisk CLI and log files may contain
sensitive information, and that people should keep this in mind.

Modified:
    branches/1.2/SECURITY

Modified: branches/1.2/SECURITY
URL: http://svn.digium.com/view/asterisk/branches/1.2/SECURITY?view=diff&rev=58896&r1=58895&r2=58896
==============================================================================
--- branches/1.2/SECURITY (original)
+++ branches/1.2/SECURITY Wed Mar 14 11:38:48 2007
@@ -65,3 +65,9 @@
 DON'T FORGET TO TAKE THE DEMO CONTEXT OUT OF YOUR DEFAULT CONTEXT.  There
 isn't really a security reason, it just will keep people from wanting to 
 play with your Asterisk setup remotely.
+
+* LOG SECURITY
+
+Please note that the Asterisk log files, as well as information printed to the
+Asterisk CLI, may contain sensitive information such as passwords and call 
+history.  Keep this in mind when providing access to these resources.