summaryrefslogtreecommitdiffstats
path: root/releasenotes/notes/restrict-access-to-kernel-message-buffer-809160674b92a073.yaml
blob: c24e8921bad0ae9679f04635f8c8c601121a297e (plain)
1
2
3
4
5
6
7
8
9
10
11
---
upgrade:
  - |
    The kernel.dmesg_restrict is now set to 1 to prevent exposure of sensitive
    kernel address information with unprivileged access. Deployments that set
    or depend on values other than 1 for kernel.dmesg_restrict may be affected
    by upgrading.
security:
  - |
    Kernel syslog contains sensitive kernel address information, setting
    kernel.dmesg_restrict to avoid unprivileged access to this information.