Changed the default for live_dangerously to no

........

Merged revisions 404006 from http://svn.asterisk.org/svn/asterisk/branches/12

git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@404009 65c4cc65-6c06-0410-ace0-fbb531ad65f3

diff --git a/configs/asterisk.conf.sample b/configs/asterisk.conf.sample
index f7cda268f323402738fce7395081680a6456af72..985c80c289b6202fac438cf82b1e823a0ec000a1 100644 (file)
--- a/configs/asterisk.conf.sample
+++ b/configs/asterisk.conf.sample
@@ -88,7 +88,7 @@ documentation_language = en_US        ; Set the language you want documentation
                                ; etc.) These functions (such as SHELL) are
                                ; considered dangerous because they can allow
                                ; privilege escalation.
-                               ; Default yes, for backward compatability.
+                               ; Default no
 
 ; Changing the following lines may compromise your security.
 ;[files]

diff --git a/main/asterisk.c b/main/asterisk.c
index 3ed085d280db9bb7b8b502ca4d175c42f8e52bac..d06509516ae92190df3a430af93965a28738d54d 100644 (file)
--- a/main/asterisk.c
+++ b/main/asterisk.c
@@ -3332,8 +3332,8 @@ static void ast_readconfig(void)
                unsigned int dbdir:1;
                unsigned int keydir:1;
        } found = { 0, 0 };
-       /* Default to true for backward compatibility */
-       int live_dangerously = 1;
+       /* Default to false for security */
+       int live_dangerously = 0;
 
        /* Set default value */
        option_dtmfminduration = AST_MIN_DTMF_DURATION;