Messages in this thread | ![/](/images/icornerl.gif) | | Subject | Re: kernel ring buffer accessible by users | From | Robert Love <> | Date | 23 Apr 2003 11:59:49 -0400 |
| |
On Wed, 2003-04-23 at 11:56, Werner Almesberger wrote:
> How do you know what is sensitive information ? A kernel debug > message may just say something like "bad message 47 65 68 65 69 6d", > and the kernel has no idea that this is actually a password
Why on earth would the user give the kernel a password?
The point is user input like telephone numbers or passwords should never be fed into the kernel anyhow. On the rare case it is (apparently this ISDN instance, assuming it is actually from dmesg and not syslog), the kernel should not echo it.
Robert Love
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| ![\](/images/icornerr.gif) |