[PATCH] hostapd: disable logging of wpa_passphrase

Christian Korber ck at dev.tdt.de
Tue Dec 17 00:46:48 PST 2024


From: Christian Korber <ckorber at tdt.de>

During the initialization of hostapd, the configuration file is logged in
the syslog and the wpa_passphrase is also logged.

This is not ideal from a security point of view. Therefore this commit allows
the output if compiled in debug mode.

Signed-off-by: Christian Korber <ckorber at tdt.de>
---
 .../804-disable-logging-of-passphrase.patch       | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 package/network/services/hostapd/patches/804-disable-logging-of-passphrase.patch

diff --git a/package/network/services/hostapd/patches/804-disable-logging-of-passphrase.patch b/package/network/services/hostapd/patches/804-disable-logging-of-passphrase.patch
new file mode 100644
index 000000000..86f8fd774
--- /dev/null
+++ b/package/network/services/hostapd/patches/804-disable-logging-of-passphrase.patch
@@ -0,0 +1,15 @@
+--- a/src/ap/hostapd.c
++++ b/src/ap/hostapd.c
+@@ -3378,8 +3378,11 @@ hostapd_interface_init_bss(struct hapd_i
+ 		}
+ 	}
+ 
+-	wpa_printf(MSG_INFO, "Configuration file: %s (phy %s)%s",
++	if (CONFIG_MSG_MIN_PRIORITY <= MSG_DEBUG){
++		wpa_printf(MSG_INFO, "Configuration file: %s (phy %s)%s",
+ 		   config_fname, phy, iface ? "" : " --> new PHY");
++	}
++
+ 	if (iface) {
+ 		struct hostapd_config *conf;
+ 		struct hostapd_bss_config **tmp_conf;
-- 
2.39.5




More information about the Hostap mailing list