[asterisk-commits] russell: trunk r58898 - in /trunk: ./ doc/security.txt

[asterisk-commits at lists.digium.com]

Author: russell
Date: Wed Mar 14 11:40:52 2007
New Revision: 58898

URL: http://svn.digium.com/view/asterisk?view=rev&rev=58898
Log:
Merged revisions 58897 via svnmerge from 
https://origsvn.digium.com/svn/asterisk/branches/1.4

................
r58897 | russell | 2007-03-14 11:40:22 -0500 (Wed, 14 Mar 2007) | 11 lines

Merged revisions 58896 via svnmerge from 
https://origsvn.digium.com/svn/asterisk/branches/1.2

........
r58896 | russell | 2007-03-14 11:38:48 -0500 (Wed, 14 Mar 2007) | 3 lines

Add a note to the security file that the Asterisk CLI and log files may contain
sensitive information, and that people should keep this in mind.

........

................

Modified:
    trunk/   (props changed)
    trunk/doc/security.txt

Propchange: trunk/
------------------------------------------------------------------------------
Binary property 'branch-1.4-merged' - no diff available.

Modified: trunk/doc/security.txt
URL: http://svn.digium.com/view/asterisk/trunk/doc/security.txt?view=diff&rev=58898&r1=58897&r2=58898
==============================================================================
--- trunk/doc/security.txt (original)
+++ trunk/doc/security.txt Wed Mar 14 11:40:52 2007
@@ -72,3 +72,9 @@
 DON'T FORGET TO TAKE THE DEMO CONTEXT OUT OF YOUR DEFAULT CONTEXT.  There
 isn't really a security reason, it just will keep people from wanting to 
 play with your Asterisk setup remotely.
+
+* LOG SECURITY
+
+Please note that the Asterisk log files, as well as information printed to the
+Asterisk CLI, may contain sensitive information such as passwords and call 
+history.  Keep this in mind when providing access to these resources.