<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body link="#355491" alink="#4262a1" vlink="#355491" style="background: #e2e2e2; margin: 0; padding: 20px;">
<div>
<table cellpadding="0" bgcolor="#FFFFFF" border="0" cellspacing="0" style="border: 1px solid #dadada; margin-bottom: 30px; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="border: solid 2px #ccc; background: #dadada; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td bgcolor="#000000" valign="middle" height="58px" style="border-bottom: 1px solid #ccc; padding: 20px; -moz-border-radius-topleft: 3px; -moz-border-radius-topright: 3px; -webkit-border-top-right-radius: 5px; -webkit-border-top-left-radius: 5px;">
<h1 style="color: #333333; font: bold 22px Arial, Helvetica, sans-serif; margin: 0; display: block !important;">
<!-- To have a header image/logo replace the name below with your img tag -->
<!-- Email clients will render the images when the message is read so any image -->
<!-- must be made available on a public server, so that all recipients can load the image. -->
<a href="https://community.jboss.org/index.jspa" style="text-decoration: none; color: #E1E1E1">JBoss Community</a></h1>
</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" style="font: normal 12px Arial, Helvetica, sans-serif; color:#333333; padding: 20px; -moz-border-radius-bottomleft: 4px; -moz-border-radius-bottomright: 4px; -webkit-border-bottom-right-radius: 5px; -webkit-border-bottom-left-radius: 5px;"><h3 style="margin: 10px 0 5px; font-size: 17px; font-weight: normal;">
Re: JAR blacklist for deployment
</h3>
<span style="margin-bottom: 10px;">
created by <a href="https://community.jboss.org/people/ndipiazza">Nicholas DiPiazza</a> in <i>JBoss AS 7 Development</i> - <a href="https://community.jboss.org/message/785269#785269">View the full discussion</a>
</span>
<hr style="margin: 20px 0; border: none; background-color: #dadada; height: 1px;">
<div class="jive-rendered-content"><p>First of all, thanks for the feedback. I'm glad you think it's a good idea.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>So as a follow up: what do you I'm looking for your opinions on the best strategy for coming up with the best default list of blacklisted JARs. In other words, JARs that are NEVER ok to have in your deployment.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>I need to:</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>a) how to check to see if a JAR has been blacklisted. </p><p>b) getting a list of blacklisted JARs</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>My ideas for (a):</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><ul><li>Collect store a SHA1 checksum for all blacklisted JARs and store in text file <strong>conf/blacklist.properties</strong>. Load the checksum list as a dictionary during server startup. Validate SHA1 checksum for JARs deployed to verify none match a blacklisted JAR from the dictionary.</li><li>Just store the MANIFEST.MF for all blacklisted JARs in a special directory within <strong>conf/blacklisted-jar-manifests</strong>. During deployment, check all JAR manifests don't match a blacklisted one.</li><li>Instead of blacklisting JARs, blacklist certain Classes that if found in any JAR within your deployment will cause the warning. ----> This is the one I'm leaning towards.</li></ul><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>My ideas for (b):</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>List of all JBoss system JARs:</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>From AS7+: Blacklist some or all JARs from modules\org\jboss</p><p>For AS4-6: Blacklist all JARs in client/jboss*.jar, server/default/lib/jboss*.jar, and server/all/lib/jboss*.jar</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>That is a good default list for now.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>Any ideas on this?  </p></div>
<div style="background-color: #f4f4f4; padding: 10px; margin-top: 20px;">
<p style="margin: 0;">Reply to this message by <a href="https://community.jboss.org/message/785269#785269">going to Community</a></p>
<p style="margin: 0;">Start a new discussion in JBoss AS 7 Development at <a href="https://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2225">Community</a></p>
</div></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>