Re: [Engine-devel] Secret quartz update checks
On 02/25/2013 03:13 PM, Doron Fediuck wrote:
Hi,
While deploying a development setup in a new machine I noticed the following quartz
line:
2013-02-25 16:10:28,546 INFO [org.jboss.as.server] (DeploymentScanner-threads - 2)
JBAS018559: Deployed "engine.ear"
2013-02-25 16:10:30,143 INFO [org.quartz.utils.UpdateChecker] (Timer-1) New Quartz
update(s) found: 2.1.6
[http://www.terracotta.org/kit/reflector?kitID=default&pageID=QuartzCh...]
This is suggesting that quartz is reaching out to verify on new updates.
Do we really need it?
Do we really want it?
Yes, it is indeed calling home, which is bad from the security point of
view. We must disable it.
--
Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta
3ºD, 28016 Madrid, Spain
Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L.