The PCI-DSS (Payment Card Industry Data Security Standard) requires encryption, not merely permission restriction, for sensitive data. Hence I'm looking at the DTMF logging which can probably be easily re-patterned back into the digits, the curl POST which also shows everything in the log, the dialed_digits in a standard xml_cdr.. Otherwise, afaik, lua won't log things unless you explicitly tell it to. Any suggestions other than setting the entire switch to fsctl loglevel 6 and not storing the xml_cdrs in their raw form? -Avi On Wed, May 30, 2012 at 8:11 PM, Michael Collins <msc@freeswitch.org> wrote:
If it's a compliance issue then I'd triple-check to make sure that no one unauthorized can get to any of your FS logs or CDR data. I suspect that logging vs. not logging dialed_digits is not a make-or-break proposition. If you're doing xml_cdrs then you've probably got that same data in other log lines.
-MC
On Wed, May 30, 2012 at 9:08 AM, Patrick Lists < freeswitch-list@puzzled.xs4all.nl> wrote:
On 30-05-12 17:48, Michael Collins wrote:
And.. similarly is there a way to blank out the var digits_dialed in the xml_cdr, from within FS, before the end of the call?
Why do you need to clear it out? What information does it collect that you don't need?
Since it's credit card data I can imagine Avi does not want it logged for security purposes.
Regards, Patrick
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org