[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#555680: [Secure-testing-team] Bug#555680: System information in bug reports may be security-sensitive



On mer., 2009-11-11 at 02:34 +0000, Ben Hutchings wrote:
> The bug script now offers to include network configuration and status.
> The network configuration file /etc/network/interfaces may include
> encryption keys for wireless networks, which we should scrub.  There
> is also a more general problem of sensitive information in the kernel
> log, but I'm not sure what we can do about that.

Maybe add a big warning, a preview and a Y/N question about including
the script.

The thing is, if it defaults to N, a lot of people will just use “enter”
without caring much, and kernel team will receive a lot of useless
reports.

Cheers,
-- 
Yves-Alexis

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: