MPS issue job003994

TitleMPS_TELEMETRY_CONTROL may introduce security risks
Assigned userRichard Brooksby
DescriptionSetting the MPS_TELEMETRY_CONTROL environment variable causes the MPS to write telemetry to disk in the current working directory of an application build with the MPS. This is a very useful debugging and tuning feature, but it might introduce risks in production.
AnalysisThe behaviour is implemented in the plinth, so any client can disable it by modifying mpsliban.c. Document this, as a first step.
Then discuss with our clients.
How foundinspection
EvidenceThe getenv call in mpsliban.c.
Created byRichard Brooksby
Created on2016-03-21 13:45:49
Last modified byGareth Rees
Last modified on2016-09-04 15:28:25
History2016-03-21 RB Created.


Change Effect Date User Description
192138 closed 2016-09-04 15:28:25 Gareth Rees Document security issues in the MPS.