[jboss-jira] [JBoss JIRA] (WFLY-2097) The vault wants write access to the keystore even when not needed

[Tom Fonteyne (JIRA)]

Tom Fonteyne created WFLY-2097:
----------------------------------

             Summary: The vault wants write access to the keystore even when not needed
                 Key: WFLY-2097
                 URL: https://issues.jboss.org/browse/WFLY-2097
             Project: WildFly
          Issue Type: Bug
          Components: Security
    Affects Versions: 8.0.0.Alpha4
            Reporter: Tom Fonteyne
            Assignee: Darran Lofthouse


security/src/main/java/org/jboss/as/security/vault/VaultSession.java

want constant "write" access to the keystore. This is considered to be a security risk.

We understand this was a requirement to allow upgrades to be done automatically but don't see why the write-access has to be permanent

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira