[jboss-as7-dev] JBAS-9373, need control of what interfaces/ports are bound to

Scott Stark sstark at redhat.com
Thu Apr 21 13:18:26 EDT 2011


I created this bug, now changed to an enhancement request:
https://issues.jboss.org/browse/JBAS-9373

to deal with the tm layer binding to an anonymous port on the 127.0.0.1 
interface as a means to obtain a system wide unique number. How this is 
done is not exposed via the domain model, and when running in an selinux 
(secured linux) environment we need control over what interfaces/ports 
are bound to, where files are written, etc. to be able to write the 
correct selinux policy.

Do we need, or already have a id service that can be leveraged here? It 
looks like the arjuna Uid class that is used generates a 28 byte/224 bit 
value.

The main issue is that any subsystem has to express what privileged 
resources it is making use of through the domain model.




More information about the jboss-as7-dev mailing list