You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@maven.apache.org by "Anuerin Diaz (JIRA)" <ji...@codehaus.org> on 2005/11/11 12:09:06 UTC

[jira] Created: (MNG-1520) Excluding pom.properties and pom.xml from produced artifact

Excluding pom.properties and pom.xml from produced artifact 
------------------------------------------------------------

         Key: MNG-1520
         URL: http://jira.codehaus.org/browse/MNG-1520
     Project: Maven 2
        Type: Wish
  Components: maven-jar-plugin  
    Reporter: Anuerin Diaz


Although the files are supposed to be used in capturing as much build information as necessary, they are considered to be a security risk in some situations. There must be a way to exclude these files even during development packaging. 

The released Maven plugins do not contain these files so there is a way to remove them. The following configuration do not work when added to the project descriptor:

<plugin>
   <artifactId>maven-jar-plugin</artifactId>
   <configuration>
      <excludes>**/pom.*</excludes>
   </configuration>

</plugin>


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


[jira] Updated: (MNG-1520) Excluding pom.properties and pom.xml from produced artifact

Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/MNG-1520?page=all ]

Brett Porter updated MNG-1520:
------------------------------

    Fix Version: 2.0.1

> Excluding pom.properties and pom.xml from produced artifact 
> ------------------------------------------------------------
>
>          Key: MNG-1520
>          URL: http://jira.codehaus.org/browse/MNG-1520
>      Project: Maven 2
>         Type: Wish
>   Components: maven-jar-plugin
>     Reporter: Anuerin Diaz
>     Assignee: Allan Ramirez
>      Fix For: 2.0.1

>
> Original Estimate: 1 hour
>         Remaining: 1 hour
>
> Although the files are supposed to be used in capturing as much build information as necessary, they are considered to be a security risk in some situations. There must be a way to exclude these files even during development packaging. 
> The released Maven plugins do not contain these files so there is a way to remove them. The following configuration do not work when added to the project descriptor:
> <plugin>
>    <artifactId>maven-jar-plugin</artifactId>
>    <configuration>
>       <excludes>**/pom.*</excludes>
>    </configuration>
> </plugin>

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


[jira] Closed: (MNG-1520) Excluding pom.properties and pom.xml from produced artifact

Posted by "John Casey (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/MNG-1520?page=all ]
     
John Casey closed MNG-1520:
---------------------------

    Resolution: Duplicate

> Excluding pom.properties and pom.xml from produced artifact 
> ------------------------------------------------------------
>
>          Key: MNG-1520
>          URL: http://jira.codehaus.org/browse/MNG-1520
>      Project: Maven 2
>         Type: Wish
>   Components: maven-jar-plugin
>     Reporter: Anuerin Diaz
>     Assignee: Allan Ramirez
>      Fix For: 2.0.1

>
> Original Estimate: 1 hour
>        Time Spent: 30 minutes
>         Remaining: 30 minutes
>
> Although the files are supposed to be used in capturing as much build information as necessary, they are considered to be a security risk in some situations. There must be a way to exclude these files even during development packaging. 
> The released Maven plugins do not contain these files so there is a way to remove them. The following configuration do not work when added to the project descriptor:
> <plugin>
>    <artifactId>maven-jar-plugin</artifactId>
>    <configuration>
>       <excludes>**/pom.*</excludes>
>    </configuration>
> </plugin>

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


[jira] Updated: (MNG-1520) Excluding pom.properties and pom.xml from produced artifact

Posted by "Allan Ramirez (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/MNG-1520?page=all ]

Allan Ramirez updated MNG-1520:
-------------------------------

    Remaining Estimate: 1 hour
     Original Estimate: 1 hour

> Excluding pom.properties and pom.xml from produced artifact 
> ------------------------------------------------------------
>
>          Key: MNG-1520
>          URL: http://jira.codehaus.org/browse/MNG-1520
>      Project: Maven 2
>         Type: Wish
>   Components: maven-jar-plugin
>     Reporter: Anuerin Diaz
>     Assignee: Allan Ramirez

>
> Original Estimate: 1 hour
>         Remaining: 1 hour
>
> Although the files are supposed to be used in capturing as much build information as necessary, they are considered to be a security risk in some situations. There must be a way to exclude these files even during development packaging. 
> The released Maven plugins do not contain these files so there is a way to remove them. The following configuration do not work when added to the project descriptor:
> <plugin>
>    <artifactId>maven-jar-plugin</artifactId>
>    <configuration>
>       <excludes>**/pom.*</excludes>
>    </configuration>
> </plugin>

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


[jira] Commented: (MNG-1520) Excluding pom.properties and pom.xml from produced artifact

Posted by "John Casey (JIRA)" <ji...@codehaus.org>.
    [ http://jira.codehaus.org/browse/MNG-1520?page=comments#action_52581 ] 

John Casey commented on MNG-1520:
---------------------------------

Use the MavenArchiveConfiguration.setAddMavenDescriptor(..) method. It would look like:

...
  <build>
    <plugins>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-jar-plugin</artifactId>
<version>2.1-SNAPSHOT</version>
<configuration>
  <archive>
  ...
    <addMavenDescriptor>false</addMavenDescriptor>
  </archive>
</configuration>
</plugin>
</plugins>
  </build>
... 

This feature was implemented in MNG-1598

> Excluding pom.properties and pom.xml from produced artifact 
> ------------------------------------------------------------
>
>          Key: MNG-1520
>          URL: http://jira.codehaus.org/browse/MNG-1520
>      Project: Maven 2
>         Type: Wish
>   Components: maven-jar-plugin
>     Reporter: Anuerin Diaz
>     Assignee: Allan Ramirez
>      Fix For: 2.0.1

>
> Original Estimate: 1 hour
>        Time Spent: 30 minutes
>         Remaining: 30 minutes
>
> Although the files are supposed to be used in capturing as much build information as necessary, they are considered to be a security risk in some situations. There must be a way to exclude these files even during development packaging. 
> The released Maven plugins do not contain these files so there is a way to remove them. The following configuration do not work when added to the project descriptor:
> <plugin>
>    <artifactId>maven-jar-plugin</artifactId>
>    <configuration>
>       <excludes>**/pom.*</excludes>
>    </configuration>
> </plugin>

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org