The PCI-DSS (Payment Card Industry Data Security Standard) requires encryption, not merely permission restriction, for sensitive data. Hence I'm looking at the DTMF logging which can probably be easily re-patterned back into the digits, the curl POST which also shows everything in the log, the dialed_digits in a standard xml_cdr..
Otherwise, afaik, lua won't log things unless you explicitly tell it to.
Any suggestions other than setting the entire switch to fsctl loglevel 6 and not storing the xml_cdrs in their raw form?
-Avi
On Wed, May 30, 2012 at 8:11 PM, Michael Collins
<msc@freeswitch.org> wrote:
If it's a compliance issue then I'd triple-check to make sure that no one unauthorized can get to any of your FS logs or CDR data. I suspect that logging vs. not logging dialed_digits is not a make-or-break proposition. If you're doing xml_cdrs then you've probably got that same data in other log lines.
-MCOn Wed, May 30, 2012 at 9:08 AM, Patrick Lists
<freeswitch-list@puzzled.xs4all.nl> wrote:
On 30-05-12 17:48, Michael Collins wrote:
> And.. similarly is there a way to blank out the var digits_dialed in
> the xml_cdr, from within FS, before the end of the call?
>
> Why do you need to clear it out? What information does it collect that
> you don't need?
Since it's credit card data I can imagine Avi does not want it logged
for security purposes.
Regards,
Patrick
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org