Uploaded image for project: 'JBoss BRMS Platform'
  1. JBoss BRMS Platform
  2. RHBRMS-2394

Update configuration to have the BRMS/BPMS security policy turned off by default

This issue belongs to an archived project. You can view it, but you can't modify it. Learn more

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Blocker
    • 6.0.0
    • 6.0.0
    • Configuration
    • None

    Description

      Description of problem:
      As a result of enabling the security manager to resolve MVEL evaluation security issues, a substantial performance drop has been identified in FSW/BRMS/BPMS 6 builds. This performance drop is substantial enough that it could undermine the competitiveness of these products.

      Hence disable the security manager by default in standalone.sh, and provide e.g. standalone-secure.sh with it enabled.
      This also needs to be done for the domain mode.

      Attachments

        Issue Links

          blocks

          Bug - A problem that impairs or prevents the functions of the product. RHBRMS-1019 Document the configuration of the security policy for BRMS/BPMS

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Verified
          is duplicated by

          Bug - A problem that impairs or prevents the functions of the product. RHBRMS-1019 Document the configuration of the security policy for BRMS/BPMS

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Verified

          Activity

            People

              rzhang+1@redhat.com Cheng Zhang (Inactive)
              rrajasek@redhat.com Rajesh Rajasekaran
              Archiver:
              rhn-support-ceverson Clark Everson
              Lukáš Petrovický Lukáš Petrovický (Inactive)
              Lukáš Petrovický Lukáš Petrovický (Inactive)
              Cheng Zhang (Inactive)

              Dates

                Created:
                Updated:
                Resolved:
                Archived:

                PagerDuty