Ben Hutchings
2009-Nov-11 02:34 UTC
[Secure-testing-team] Bug#555680: System information in bug reports may be security-sensitive
Package: linux-2.6 Version: 2.6.31-1 Severity: normal Tags: security The bug script now offers to include network configuration and status. The network configuration file /etc/network/interfaces may include encryption keys for wireless networks, which we should scrub. There is also a more general problem of sensitive information in the kernel log, but I''m not sure what we can do about that. Ben. -- System Information: Debian Release: squeeze/sid APT prefers unstable APT policy: (500, ''unstable''), (500, ''stable''), (1, ''experimental'') Architecture: i386 (x86_64) Kernel: Linux 2.6.31-1-amd64 (SMP w/2 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash