[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#723171: linux-image-*: bug reporting scripts should mask private network addresses in report



On Thu, 2013-09-19 at 01:00 +0400, Bob Bib wrote:
> Ben Hutchings:
> > No, the script already asks whether or not to include this information.
> 
> Unfortunately, it's not completely true;
> it doesn't prevent including MAC addresses from dmesg log for wlan interfaces.

It is of course possible for all kinds of sensitive information to end
up in the kernel log.  But it appears near the top of the bug report so
if people are concerned about that then they are likely to notice this
and delete it.

The kernel log is readable by any program running on your system, but
you can change that:

# sysctl kernel.dmesg_restrict=1
# echo >>/etc/sysctl.conf kernel.dmesg_restrict=1

Unfortunately, basically all the information that's useful for
understanding what's in the system affected by a bug is also useful for
identifying the system.  If you want to keep a computer secret then you
must avoid sending bug reports from it or about it.

Ben.

-- 
Ben Hutchings
The two most common things in the universe are hydrogen and stupidity.

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: