51c91597fb
Unprivileged access to the kernel syslog can expose sensitive kernel address information. Change-Id: If40f1b883dfde6c7870bf9c463753d037867c9e2 Signed-off-by: zshi <zshi@redhat.com>
12 lines
438 B
YAML
12 lines
438 B
YAML
---
|
|
upgrade:
|
|
- |
|
|
The kernel.dmesg_restrict is now set to 1 to prevent exposure of sensitive
|
|
kernel address information with unprivileged access. Deployments that set
|
|
or depend on values other than 1 for kernel.dmesg_restrict may be affected
|
|
by upgrading.
|
|
security:
|
|
- |
|
|
Kernel syslog contains sensitive kernel address information, setting
|
|
kernel.dmesg_restrict to avoid unprivileged access to this information.
|