Uploaded image for project: 'Derby'
  1. Derby
  2. DERBY-3657

Comment in template security policy incorrectly says that JMX is not enabled by default

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 10.4.1.3
    • Fix Version/s: 10.4.2.0, 10.5.1.1
    • Component/s: Demos/Scripts, JMX
    • Labels:
      None
    • Environment:
      N/A
    • Bug behavior facts:
      Security

      Description

      The template policy located at $DERBY_HOME/demo/templates/server.policy (release distributions) and $trunk/java/drda/org/apache/derby/drda/template.policy (source tree) contains a comment relating to JMX permissions which says:

      // JMX management of Derby is NOT enabled by default; see also DERBY-1387.

      This was no longer true after DERBY-3429 was fixed, which includes the 10.4.1.3 release. JMX monitoring and management is enabled by default given that the JVM includes the required APIs, and that the security policy allows JMX features to come up. The comment should have been removed, but this has not happened. The same applies to the default server policy, server.policy, which also should be corrected (this policy's comments are however not exposed to users in the same way as the template).

      Note that no code or actual permissions need to change as a result of this; it is merely an outdated comment that needs to be removed in order not to give users a false impression.

        Attachments

          Activity

            People

            • Assignee:
              johnemb John Embretsen
              Reporter:
              johnemb John Embretsen
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: