Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

prevent leaks of confidential information in enclave logs for production builds #1600

Open
brenzi opened this issue Jun 9, 2024 · 0 comments
Open

prevent leaks of confidential information in enclave logs for production builds #1600

brenzi opened this issue Jun 9, 2024 · 0 comments
Labels
F1-security possible vulnerability

Comments

@brenzi
Copy link
Collaborator

brenzi commented Jun 9, 2024

For debugging purposes, we're currently logging way too much information.
For production builds, enclave logs should be suppressed, with the exception of whitelisted logs which are known not to leak sensitive information
@brenzi brenzi changed the title prevent information leaks in enaclave logs for production builds prevent leaks of confidential information in enclave logs for production builds Jun 9, 2024
@brenzi brenzi added the F1-security possible vulnerability label Jun 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
F1-security possible vulnerability
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@brenzi