You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@james.apache.org by "ottoka (via GitHub)" <gi...@apache.org> on 2023/03/11 10:35:47 UTC
[GitHub] [james-project] ottoka opened a new pull request, #1478: JAMES-3881 Set a JMX password (3.7.x)
ottoka opened a new pull request, #1478:
URL: https://github.com/apache/james-project/pull/1478
This is a quick cherry pick of the remaining JAMES-3881 commits to the 3.7.x branch. Some of them were already in place:
JAMES-3881 -Djmx.remote.x.mlet.allow.getMBeansFromURL=false (#1460)
JAMES-3881 Prevent CommonsBeanutils1 deserialization exploit [BACKPORT] (#1455)
JAMES-3881 Unregister LOG4J MBeans (#1459)
DISCLAIMER: I was not involved in the original work. Someone more knowledgeable with JMX please review it.
I did a quick test on distributed-pop3-app: James creates the jmxremote files, and the CLI requires authentication. Given authentication it works. Apart from this I cannot really tell if there is anything missing.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For additional commands, e-mail: notifications-help@james.apache.org
[GitHub] [james-project] chibenwa commented on pull request #1478: JAMES-3881 Set a JMX password (3.7.x)
Posted by "chibenwa (via GitHub)" <gi...@apache.org>.
chibenwa commented on PR #1478:
URL: https://github.com/apache/james-project/pull/1478#issuecomment-1464921261
Huge thanks.
Maybe we can squash the fixup (second commit?)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For additional commands, e-mail: notifications-help@james.apache.org
[GitHub] [james-project] ottoka commented on pull request #1478: JAMES-3881 Set a JMX password (3.7.x)
Posted by "ottoka (via GitHub)" <gi...@apache.org>.
ottoka commented on PR #1478:
URL: https://github.com/apache/james-project/pull/1478#issuecomment-1464959000
Latest push squashes the fixup as requested.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For additional commands, e-mail: notifications-help@james.apache.org
[GitHub] [james-project] ottoka merged pull request #1478: JAMES-3881 Set a JMX password (3.7.x)
Posted by "ottoka (via GitHub)" <gi...@apache.org>.
ottoka merged PR #1478:
URL: https://github.com/apache/james-project/pull/1478
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For additional commands, e-mail: notifications-help@james.apache.org