Ofer Schreiber has submitted this change and it was merged.
Change subject: packaging: Bind ports to loopback by default
......................................................................
packaging: Bind ports to loopback by default
This patch changes the JBoss configuration file so that most ports
are bound to the loopback interface by default, as they are not
expected to be used from outside the machine. This also reduces
the attack surface of the engine, even if the firewall is
disabled.
Change-Id: If90e140e8767f229eaaf141a68231e5964c724ca
Signed-off-by: Juan Hernandez <juan.hernandez(a)redhat.com>
---
M packaging/fedora/engine-service.xml.in
1 file changed, 6 insertions(+), 3 deletions(-)
Approvals:
Juan Hernandez: Verified
Ofer Schreiber: Looks good to me, approved
--
To view, visit
http://gerrit.ovirt.org/6349
To unsubscribe, visit
http://gerrit.ovirt.org/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: If90e140e8767f229eaaf141a68231e5964c724ca
Gerrit-PatchSet: 4
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Juan Hernandez <juan.hernandez(a)redhat.com>
Gerrit-Reviewer: Alex Lourie <alourie(a)redhat.com>
Gerrit-Reviewer: Alon Bar-Lev <alonbl(a)redhat.com>
Gerrit-Reviewer: Juan Hernandez <juan.hernandez(a)redhat.com>
Gerrit-Reviewer: Ofer Schreiber <oschreib(a)redhat.com>