[jboss-cvs] JBossAS SVN: r95639 - projects/docs/enterprise/5.0/Release_Notes_GA/en-US.

[jboss-cvs-commits at lists.jboss.org]

Author: laubai
Date: 2009-10-27 20:08:31 -0400 (Tue, 27 Oct 2009)
New Revision: 95639

Modified:
   projects/docs/enterprise/5.0/Release_Notes_GA/en-US/Release_Notes.xml
Log:
Added note for JBPAPP-2948, -2952.

Modified: projects/docs/enterprise/5.0/Release_Notes_GA/en-US/Release_Notes.xml
===================================================================
--- projects/docs/enterprise/5.0/Release_Notes_GA/en-US/Release_Notes.xml	2009-10-27 23:34:22 UTC (rev 95638)
+++ projects/docs/enterprise/5.0/Release_Notes_GA/en-US/Release_Notes.xml	2009-10-28 00:08:31 UTC (rev 95639)
@@ -706,19 +706,21 @@
 				</itemizedlist>
 			</para>
 		</formalpara>-->
-        <!--#MODIFY: ADD EXPLANATION OF WHAT WENT WRONG, WHAT WAS DONE, WHAT TO DO TO GET EXAMPLE BACK.
 		<formalpara>
 			<title>Documentation</title>
 			<para>
 				<itemizedlist>
 					<listitem>
                     <para>
-                      <ulink url="https://jira.jboss.org/jira/browse/JBPAPP-2948">JBPAPP-2948</ulink>: The <filename>deploy/jmx-remoting.sar</filename> that instantiates a JSR-160 adapter for remote access to the JBoss MBeanServer for use with tools such as the JConsole does not currently support secure access. This presents a security risk in production environments where a specific address is accessed via this JSR-160 adapter. We strongly recommend disabling this adapter by undeploying or removing the <filename>deploy/jmx-remoting.sar</filename> directory.
+                      <ulink url="https://jira.jboss.org/jira/browse/JBPAPP-2948">JBPAPP-2948</ulink>: The <filename>deploy/jmx-remoting.sar</filename> that instantiates a JSR-160 adapter for remote access to the JBoss MBeanServer for use with tools such as the JConsole did not support secure access. This presented a security risk in production environments where a specific address was accessed via this JSR-160 adapter. The adapter has been removed from the <filename>deploy</filename> directory for security purposes, and we do not recommend enabling it.
                     </para>
+                    <para>
+                      The adapter has been moved to <filename>/docs/examples</filename>. If you wish to re-enable it, move it back to the <filename>deploy</filename> directory.
+                    </para>
                   </listitem>
 				</itemizedlist>
 			</para>
-		</formalpara>-->
+		</formalpara>
 		<!--<formalpara>
 			<title>Core Server</title>
 			<para>