Enable CONFIG_SECURITY_DMESG_RESTRICT
Bug #1696558 reported by
Leann Ogasawara
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux-aws (Ubuntu) |
Won't Fix
|
Medium
|
Po-Hsu Lin | ||
Trusty |
Won't Fix
|
Undecided
|
Po-Hsu Lin | ||
Xenial |
Won't Fix
|
Undecided
|
Po-Hsu Lin | ||
Bionic |
Won't Fix
|
Undecided
|
Po-Hsu Lin | ||
Disco |
Won't Fix
|
Undecided
|
Po-Hsu Lin |
Bug Description
There is a request to enable the following for linux-aws.
config SECURITY_
bool "Restrict unprivileged access to the kernel syslog"
default n
help
This enforces restrictions on unprivileged users reading the kernel
syslog via dmesg(8).
If this option is not selected, no restrictions will be enforced
unless the dmesg_restrict sysctl is explicitly set to (1).
If you are unsure how to answer this question, answer N.
Changed in linux (Ubuntu): | |
assignee: | nobody → Canonical Kernel Team (canonical-kernel-team) |
importance: | Undecided → Medium |
status: | Incomplete → Triaged |
affects: | linux (Ubuntu) → linux-aws (Ubuntu) |
Changed in linux-aws (Ubuntu): | |
assignee: | Canonical Kernel Team (canonical-kernel-team) → Po-Hsu Lin (cypressyew) |
Changed in linux-aws (Ubuntu Disco): | |
status: | New → In Progress |
assignee: | nobody → Po-Hsu Lin (cypressyew) |
Changed in linux-aws (Ubuntu Bionic): | |
assignee: | nobody → Po-Hsu Lin (cypressyew) |
status: | New → In Progress |
Changed in linux-aws (Ubuntu Xenial): | |
status: | New → In Progress |
assignee: | nobody → Po-Hsu Lin (cypressyew) |
Changed in linux-aws (Ubuntu Trusty): | |
status: | New → In Progress |
assignee: | nobody → Po-Hsu Lin (cypressyew) |
tags: | added: aws |
tags: | removed: aws |
Changed in linux-aws (Ubuntu Eoan): | |
status: | Triaged → In Progress |
no longer affects: | linux-aws (Ubuntu Eoan) |
tags: | added: bionic disco trusty xenial |
To post a comment you must log in.
This bug is missing log files that will aid in diagnosing the problem. While running an Ubuntu kernel (not a mainline or third-party kernel) please enter the following command in a terminal window:
apport-collect 1696558
and then change the status of the bug to 'Confirmed'.
If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.
This change has been made by an automated script, maintained by the Ubuntu Kernel Team.