[jboss-cvs] JBossAS SVN: r82293 - projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US.
jboss-cvs-commits at lists.jboss.org
jboss-cvs-commits at lists.jboss.org
Mon Dec 15 19:33:40 EST 2008
Author: Darrin
Date: 2008-12-15 19:33:40 -0500 (Mon, 15 Dec 2008)
New Revision: 82293
Modified:
projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Requirements_for_the_Evaluated_Configuration.xml
projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Security_Features.xml
Log:
JBOSSCC-38 and other updates
Modified: projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Requirements_for_the_Evaluated_Configuration.xml
===================================================================
--- projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Requirements_for_the_Evaluated_Configuration.xml 2008-12-15 23:19:44 UTC (rev 82292)
+++ projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Requirements_for_the_Evaluated_Configuration.xml 2008-12-16 00:33:40 UTC (rev 82293)
@@ -231,13 +231,14 @@
<para>From the file <filename><replaceable>${JBOSS_HOME}</replaceable>/server/production/deploy/clustering-service.xml</filename> comment out the following MBean definitions:</para>
<programlisting language="xml"><mbean code="org.jboss.ha.jndi.HANamingService"
- name="jboss:service=HAJNDI"></programlisting>
+ name="jboss:service=HAJNDI"></programlisting>
<programlisting language="xml"><mbean code="org.jboss.invocation.unified.server.UnifiedInvokerHA"
- name="jboss:service=invoker,type=unifiedha"></programlisting>
+ name="jboss:service=invoker,type=unifiedha"></programlisting>
<programlisting language="xml"><mbean code="org.jboss.invocation.pooled.server.PooledInvokerHA"
- name="jboss:service=invoker,type=pooledha"></programlisting>
-<programlisting language="xml"><mbean code="org.jboss.cache.invalidation.bridges.JGCacheInvalidationBridge"
- name="jboss.cache:service=InvalidationBridge,type=JavaGroups"></programlisting>
+ name="jboss:service=invoker,type=pooledha"></programlisting>
+<programlisting language="xml"><mbean
+ code="org.jboss.cache.invalidation.bridges.JGCacheInvalidationBridge"
+ name="jboss.cache:service=InvalidationBridge,type=JavaGroups"></programlisting>
</listitem>
<listitem><para>Use password hashing and do not store plain text passwords on the server.</para>
@@ -272,7 +273,7 @@
<para>Update the ConversionPattern parameter in the appender/layout element
to show thread information by replacing the Default Pattern with the
Full Pattern:</para>
-<programlisting language="xml"><!-- The full pattern: Date MS Priority [Category] (Thread:NDC) Message -->
+<programlisting language="xml"><!--The full pattern: Date MS Priority [Category] (Thread:NDC) Message -->
<param name="ConversionPattern" value="%d %-5r %-5p [%c] (%t:%x) %m%n"/></programlisting>
</listitem>
</orderedlist>
Modified: projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Security_Features.xml
===================================================================
--- projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Security_Features.xml 2008-12-15 23:19:44 UTC (rev 82292)
+++ projects/docs/enterprise/4.3.3/Common_Criteria_Guide/en-US/Security_Features.xml 2008-12-16 00:33:40 UTC (rev 82293)
@@ -19,9 +19,6 @@
<listitem>
<para>URLs and paths provided with URLs can be protected from
access by subjects.</para>
- <para>
- In order to disable the HTTP service, remove the <filename>httpha-invoker.sar</filename> folder from the production server deploy directory.
- </para>
</listitem>
</varlistentry>
<varlistentry>
@@ -29,9 +26,6 @@
<listitem>
<para>EJBs and associated method names can be protected from
invocation by subjects.</para>
- <para>
- In order to disable the EJB service, remove the <filename>ejb3.deployer</filename> folder from the production server deploy directory.
- </para>
</listitem>
</varlistentry>
<varlistentry>
@@ -39,10 +33,6 @@
<listitem>
<para>Message queue destinations and topic destinations can be
protected from access by subjects.</para>
-
- <para>
- In order to disable the JMS service, remove the <filename>jboss-messaging.sar</filename> folder from the production server deploy directory.
- </para>
</listitem>
</varlistentry>
<varlistentry>
@@ -50,9 +40,6 @@
<listitem>
<para>Plain Old Java Objects (POJOs) deployed as Servlets and
Session Beans can be protected from access by subjects.</para>
- <para>
- In order to disable Web Services, remove the <filename>jboss-web.deployer</filename> folder from the production server deploy directory.
- </para>
</listitem>
</varlistentry>
<varlistentry>
@@ -60,22 +47,14 @@
<listitem>
<para>The JMX invokers can be protected by validating the role
of the authenticated user.</para>
- <para>
- IIn order to disable the JMS service, remove the <filename>jmx-console.war</filename> folder from the production server deploy directory.
- </para>
</listitem>
</varlistentry>
</variablelist>
<para>
- Removal and deployment can be conducted while the server is running. In
- order to remove any of the mentioned services from operation, delete the
- relevant folder for each from the production deploy directory located at
- <filename><replaceable>${JBOSS_HOME}</replaceable>/server/production/deploy/</filename>.
- Contrast to this, to start a service move the folder for the service into
- the deploy directory. For more information refer to the
- <ulink url="http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp03/html-single/Server_Configuration_Guide/index.html#Deployment">Deployment chapter</ulink>
- of the Server Configuration Guide.</para>
+ For more information refer to the Deployment chatper of the JBoss EAP Server Configuration Guide:
+ <ulink url="http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp03/html-single/Server_Configuration_Guide/index.html#Deployment">http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp03/html-single/Server_Configuration_Guide/index.html#Deployment</ulink>
+ </para>
</section>
<section id="sect-Common_Criteria_Guide-Overview_of_the_Security_Functions-Audit">
More information about the jboss-cvs-commits
mailing list