From: Christian Korber <ckorber@xxxxxx>
During the initialization of hostapd, the configuration file is logged in
the syslog and the wpa_passphrase is also logged.
This is not ideal from a security point of view. Therefore this commit allows
the output if compiled in debug mode.
Signed-off-by: Christian Korber <ckorber@xxxxxx>
---
.../804-disable-logging-of-passphrase.patch | 15 +++++++++++++++
1 file changed, 15 insertions(+)
create mode 100644 package/network/services/hostapd/patches/804-disable-logging-of-passphrase.patch
diff --git a/package/network/services/hostapd/patches/804-disable-logging-of-passphrase.patch b/package/network/services/hostapd/patches/804-disable-logging-of-passphrase.patch
new file mode 100644
index 000000000..86f8fd774
--- /dev/null
+++ b/package/network/services/hostapd/patches/804-disable-logging-of-passphrase.patch
@@ -0,0 +1,15 @@
+--- a/src/ap/hostapd.c
++++ b/src/ap/hostapd.c
+@@ -3378,8 +3378,11 @@ hostapd_interface_init_bss(struct hapd_i
+ }
+ }
+
+- wpa_printf(MSG_INFO, "Configuration file: %s (phy %s)%s",
++ if (CONFIG_MSG_MIN_PRIORITY <= MSG_DEBUG){
++ wpa_printf(MSG_INFO, "Configuration file: %s (phy %s)%s",
+ config_fname, phy, iface ? "" : " --> new PHY");
++ }
++
+ if (iface) {
+ struct hostapd_config *conf;
+ struct hostapd_bss_config **tmp_conf;
--
2.39.5
_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap
