From ffaf8857f192ba1b4d63e7aa73af4ebd55eed2c1 Mon Sep 17 00:00:00 2001 From: "David M. Lee" Date: Tue, 17 Dec 2013 14:33:35 +0000 Subject: [PATCH] Changed the default for live_dangerously to no git-svn-id: https://origsvn.digium.com/svn/asterisk/branches/12@404006 65c4cc65-6c06-0410-ace0-fbb531ad65f3 --- configs/asterisk.conf.sample | 2 +- main/asterisk.c | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/configs/asterisk.conf.sample b/configs/asterisk.conf.sample index f7cda268f3..985c80c289 100644 --- a/configs/asterisk.conf.sample +++ b/configs/asterisk.conf.sample @@ -88,7 +88,7 @@ documentation_language = en_US ; Set the language you want documentation ; etc.) These functions (such as SHELL) are ; considered dangerous because they can allow ; privilege escalation. - ; Default yes, for backward compatability. + ; Default no ; Changing the following lines may compromise your security. ;[files] diff --git a/main/asterisk.c b/main/asterisk.c index 24aa2ccf9c..92539748e8 100644 --- a/main/asterisk.c +++ b/main/asterisk.c @@ -3333,8 +3333,8 @@ static void ast_readconfig(void) unsigned int dbdir:1; unsigned int keydir:1; } found = { 0, 0 }; - /* Default to true for backward compatibility */ - int live_dangerously = 1; + /* Default to false for security */ + int live_dangerously = 0; /* Set default value */ option_dtmfminduration = AST_MIN_DTMF_DURATION; -- 2.47.2