[jboss-jira] [JBoss JIRA] Closed: (SECURITY-326) Make the web audit levels configurable via system property
[
https://jira.jboss.org/jira/browse/SECURITY-326?page=com.atlassian.jira.p...
]
Anil Saldhana closed SECURITY-326.
----------------------------------
Resolution: Done
the flag is now in WebResource:
====================
/** System Property setting to configure the web audit
* off = turn it off
* headers = audit the headers
* cookies = audit the cookie
* parameters = audit the parameters
* attributes = audit the attributes
* headers,cookies,parameters = audit the headers,cookie and parameters
* headers,cookies = audit the headers and cookies
* and so on
*
* Note: If this flag is not set in the system property, then we get no
* audit data for the web request
* */
public static final String WEB_AUDIT_FLAG = "org.jboss.security.web.audit";
========================
Make the web audit levels configurable via system property
----------------------------------------------------------
Key: SECURITY-326
URL: https://jira.jboss.org/jira/browse/SECURITY-326
Project: JBoss Security and Identity Management
Issue Type: Task
Security Level: Public(Everyone can see)
Components: JBossSX
Affects Versions: 2.0.2.SP1
Reporter: Anil Saldhana
Assignee: Anil Saldhana
Fix For: 2.0.2.SP2
we need to provide a system property
"org.jboss.security.web.audit.verbosity=request,cookie,header"
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira