summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRussell Bryant <russell@russellbryant.com>2007-03-14 16:40:52 +0000
committerRussell Bryant <russell@russellbryant.com>2007-03-14 16:40:52 +0000
commitd74caa4fe8c9719f6e148d280054b6efc536073d (patch)
tree63f075f48c151abe5c19d5cb9ad47d2be7b38d94
parent2ea01c893ca1147cd1c722d3c330c690b3b3350f (diff)
Merged revisions 58897 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.4 ................ r58897 | russell | 2007-03-14 11:40:22 -0500 (Wed, 14 Mar 2007) | 11 lines Merged revisions 58896 via svnmerge from https://origsvn.digium.com/svn/asterisk/branches/1.2 ........ r58896 | russell | 2007-03-14 11:38:48 -0500 (Wed, 14 Mar 2007) | 3 lines Add a note to the security file that the Asterisk CLI and log files may contain sensitive information, and that people should keep this in mind. ........ ................ git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@58898 65c4cc65-6c06-0410-ace0-fbb531ad65f3
-rw-r--r--doc/security.txt6
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/security.txt b/doc/security.txt
index 8abe9177d..3adf53624 100644
--- a/doc/security.txt
+++ b/doc/security.txt
@@ -72,3 +72,9 @@ exten => 6123,Dial(Zap/1)
DON'T FORGET TO TAKE THE DEMO CONTEXT OUT OF YOUR DEFAULT CONTEXT. There
isn't really a security reason, it just will keep people from wanting to
play with your Asterisk setup remotely.
+
+* LOG SECURITY
+
+Please note that the Asterisk log files, as well as information printed to the
+Asterisk CLI, may contain sensitive information such as passwords and call
+history. Keep this in mind when providing access to these resources.