Change in ovirt-engine[master]: packaging: Bind ports to loopback by default

oschreib at redhat.com oschreib at redhat.com
Thu Jul 19 09:23:00 UTC 2012


Ofer Schreiber has submitted this change and it was merged.

Change subject: packaging: Bind ports to loopback by default
......................................................................


packaging: Bind ports to loopback by default

This patch changes the JBoss configuration file so that most ports
are bound to the loopback interface by default, as they are not
expected to be used from outside the machine. This also reduces
the attack surface of the engine, even if the firewall is
disabled.

Change-Id: If90e140e8767f229eaaf141a68231e5964c724ca
Signed-off-by: Juan Hernandez <juan.hernandez at redhat.com>
---
M packaging/fedora/engine-service.xml.in
1 file changed, 6 insertions(+), 3 deletions(-)

Approvals:
  Juan Hernandez: Verified
  Ofer Schreiber: Looks good to me, approved


--
To view, visit http://gerrit.ovirt.org/6349
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: If90e140e8767f229eaaf141a68231e5964c724ca
Gerrit-PatchSet: 4
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Juan Hernandez <juan.hernandez at redhat.com>
Gerrit-Reviewer: Alex Lourie <alourie at redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alonbl at redhat.com>
Gerrit-Reviewer: Juan Hernandez <juan.hernandez at redhat.com>
Gerrit-Reviewer: Ofer Schreiber <oschreib at redhat.com>



More information about the Engine-commits mailing list