You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@felix.apache.org by Chao Wang <ch...@ericsson.com> on 2012/01/12 09:12:25 UTC
How to make config in felix config admin not allowed to modify.
Hi,
How to make config in felix config admin not allowed to modify?
/Chao
RE: How to make config in felix config admin not allowed to modify.
Posted by Chao Wang <ch...@ericsson.com>.
Hi,
Could you explain more about how to configure Configuration Admin to use its private bundle area and why it is unsafe?Does it hides the configurations like unreadable or do some file check like md5 before read?
For the platform filesystem permissions,it seems only user permissions can be set on config file/folders in suse and the bundle id is not fixed if user manually reinstall the config admin bundle.Sorry that this also need your more explain.
I only have one file related to specific service pid that need to encrypt.
/Chao
-----Original Message-----
From: Felix Meschberger [mailto:fmeschbe@adobe.com]
Sent: Thursday, January 12, 2012 10:05 PM
To: users@felix.apache.org
Subject: Re: How to make config in felix config admin not allowed to modify.
Hi,
Am 12.01.2012 um 14:47 schrieb Chao Wang:
> Hi,
> I mean how to prevent user to modify the configuration files(license info etc) in config admin bundle cache manually?
I see.
You might configure Configuration Admin such, that it uses its private bundle area. This is not particularly safe, but it hides the configuration a little bit more.
Other than that you have to revert to platform filesystem permissions to prevent anyone other than the process running the framework to read/write in the config folder.
Regards
Felix
>
> -----Original Message-----
> From: Felix Meschberger [mailto:fmeschbe@adobe.com]
> Sent: Thursday, January 12, 2012 4:25 PM
> To: users@felix.apache.org
> Subject: Re: How to make config in felix config admin not allowed to modify.
>
> Hi,
>
> Am 12.01.2012 um 09:12 schrieb Chao Wang:
>
>> Hi,
>> How to make config in felix config admin not allowed to modify?
>
> The only way to achieve this is via ConfiguationPermissions where you can specify which bundle is allowed to which Configuaration Admin operations.
>
> The "downside" of this is, that you must enable Java's SecurityManager to be able to configure permissions.
>
> Regards
> Felix
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
> For additional commands, e-mail: users-help@felix.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
> For additional commands, e-mail: users-help@felix.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
For additional commands, e-mail: users-help@felix.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
For additional commands, e-mail: users-help@felix.apache.org
Re: How to make config in felix config admin not allowed to modify.
Posted by Felix Meschberger <fm...@adobe.com>.
Hi,
Am 12.01.2012 um 14:47 schrieb Chao Wang:
> Hi,
> I mean how to prevent user to modify the configuration files(license info etc) in config admin bundle cache manually?
I see.
You might configure Configuration Admin such, that it uses its private bundle area. This is not particularly safe, but it hides the configuration a little bit more.
Other than that you have to revert to platform filesystem permissions to prevent anyone other than the process running the framework to read/write in the config folder.
Regards
Felix
>
> -----Original Message-----
> From: Felix Meschberger [mailto:fmeschbe@adobe.com]
> Sent: Thursday, January 12, 2012 4:25 PM
> To: users@felix.apache.org
> Subject: Re: How to make config in felix config admin not allowed to modify.
>
> Hi,
>
> Am 12.01.2012 um 09:12 schrieb Chao Wang:
>
>> Hi,
>> How to make config in felix config admin not allowed to modify?
>
> The only way to achieve this is via ConfiguationPermissions where you can specify which bundle is allowed to which Configuaration Admin operations.
>
> The "downside" of this is, that you must enable Java's SecurityManager to be able to configure permissions.
>
> Regards
> Felix
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
> For additional commands, e-mail: users-help@felix.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
> For additional commands, e-mail: users-help@felix.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
For additional commands, e-mail: users-help@felix.apache.org
RE: How to make config in felix config admin not allowed to modify.
Posted by Chao Wang <ch...@ericsson.com>.
Hi,
I mean how to prevent user to modify the configuration files(license info etc) in config admin bundle cache manually?
-----Original Message-----
From: Felix Meschberger [mailto:fmeschbe@adobe.com]
Sent: Thursday, January 12, 2012 4:25 PM
To: users@felix.apache.org
Subject: Re: How to make config in felix config admin not allowed to modify.
Hi,
Am 12.01.2012 um 09:12 schrieb Chao Wang:
> Hi,
> How to make config in felix config admin not allowed to modify?
The only way to achieve this is via ConfiguationPermissions where you can specify which bundle is allowed to which Configuaration Admin operations.
The "downside" of this is, that you must enable Java's SecurityManager to be able to configure permissions.
Regards
Felix
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
For additional commands, e-mail: users-help@felix.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
For additional commands, e-mail: users-help@felix.apache.org
Re: How to make config in felix config admin not allowed to modify.
Posted by Felix Meschberger <fm...@adobe.com>.
Hi,
Am 12.01.2012 um 09:12 schrieb Chao Wang:
> Hi,
> How to make config in felix config admin not allowed to modify?
The only way to achieve this is via ConfiguationPermissions where you can specify which bundle is allowed to which Configuaration Admin operations.
The "downside" of this is, that you must enable Java's SecurityManager to be able to configure permissions.
Regards
Felix
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@felix.apache.org
For additional commands, e-mail: users-help@felix.apache.org