David Jencks (JIRA) wrote:
[ http://issues.apache.org/jira/browse/GERONIMO-1477?page=all ]
David Jencks resolved GERONIMO-1477:
------------------------------------
Resolution: Fixed
Assign To: David Jencks (was: Donald Woods)
Marking resolved pending discussion on port to 1.0.1
JMX debug tool should not be loaded in the supplied config.xml
--------------------------------------------------------------
Key: GERONIMO-1477
URL: http://issues.apache.org/jira/browse/GERONIMO-1477
Project: Geronimo
Type: Bug
Components: security
Versions: 1.0
Environment: AG 1.0 on WinXP w/ Sun JDK 1.4.2_08
Reporter: Donald Woods
Assignee: David Jencks
Fix For: 1.0.1, 1.1
The JMX debugtool application should not be loaded and running on a built
server by default.
The config.xml for each assembly should be updated to include the load="false"
attribute.
If this is a security issue then shouldn't it be fixed in 1.0.1?
If we don't fix it in 1.0.1 then it only means that users will have more
time to get used to having it started before they move to 1.1.
John
