You are viewing a plain text version of this content. The canonical link for it is here.
Posted to derby-dev@db.apache.org by "Myrna van Lunteren (JIRA)" <ji...@apache.org> on 2007/05/28 09:19:15 UTC
[jira] Commented: (DERBY-2196) Run standalone network server with
security manager by default
[ https://issues.apache.org/jira/browse/DERBY-2196?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12499486 ]
Myrna van Lunteren commented on DERBY-2196:
-------------------------------------------
Can this issue be resolved/closed?
> Run standalone network server with security manager by default
> --------------------------------------------------------------
>
> Key: DERBY-2196
> URL: https://issues.apache.org/jira/browse/DERBY-2196
> Project: Derby
> Issue Type: Improvement
> Components: Network Server, Security
> Reporter: Daniel John Debrunner
> Assignee: Rick Hillegas
> Fix For: 10.3.0.0
>
> Attachments: derby-2196-01-print-01.diff, derby-2196-01-print-02.diff, derby-2196-01-print-03.diff, derby-2196-02-install-01.diff, derby-2196-03-tests-01.diff, derby-2196-10-renameOption-01.diff, releaseNote.html, releaseNote.html, secureServer.html, secureServer.html, secureServer.html, secureServer.html, secureServer.html, secureServer.html, secureServer.html, secureServer.html, secureServer.html, secureServerReleaseNote.html
>
>
> From an e-mail discussion:
> ... Derby should match the security provided by typical client server systems such as DB2, Oracle, etc. I
> think in this case system/database owners are trusting the database
> system to ensure that their system cannot be attacked. So maybe if Derby
> is booted as a standalone server with no security manager involved, it
> should install one with a default security policy. Thus allowing Derby
> to use Java security manager to manage system privileges but not
> requiring everyone to become familiar with them.
> http://mail-archives.apache.org/mod_mbox/db-derby-dev/200612.mbox/%3c4582FE67.7040308@apache.org%3e
> I imagine such a policy would allow any access to databases under derby.system.home and/or user.home.
> By standalone I mean the network server was started though the main() method (command line).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.