[asterisk-commits] russell: branch 1.4 r58897 - in /branches/1.4:
./ doc/security.txt
asterisk-commits at lists.digium.com
asterisk-commits at lists.digium.com
Wed Mar 14 09:40:23 MST 2007
Author: russell
Date: Wed Mar 14 11:40:22 2007
New Revision: 58897
URL: http://svn.digium.com/view/asterisk?view=rev&rev=58897
Log:
Merged revisions 58896 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.2
........
r58896 | russell | 2007-03-14 11:38:48 -0500 (Wed, 14 Mar 2007) | 3 lines
Add a note to the security file that the Asterisk CLI and log files may contain
sensitive information, and that people should keep this in mind.
........
Modified:
branches/1.4/ (props changed)
branches/1.4/doc/security.txt
Propchange: branches/1.4/
------------------------------------------------------------------------------
Binary property 'branch-1.2-merged' - no diff available.
Modified: branches/1.4/doc/security.txt
URL: http://svn.digium.com/view/asterisk/branches/1.4/doc/security.txt?view=diff&rev=58897&r1=58896&r2=58897
==============================================================================
--- branches/1.4/doc/security.txt (original)
+++ branches/1.4/doc/security.txt Wed Mar 14 11:40:22 2007
@@ -65,3 +65,9 @@
DON'T FORGET TO TAKE THE DEMO CONTEXT OUT OF YOUR DEFAULT CONTEXT. There
isn't really a security reason, it just will keep people from wanting to
play with your Asterisk setup remotely.
+
+* LOG SECURITY
+
+Please note that the Asterisk log files, as well as information printed to the
+Asterisk CLI, may contain sensitive information such as passwords and call
+history. Keep this in mind when providing access to these resources.
More information about the asterisk-commits
mailing list