[jboss-jira] [JBoss JIRA] (WFLY-2097) The vault wants write access to the keystore even when not needed

[Darran Lofthouse (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-2097?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse resolved WFLY-2097.
------------------------------------
    Resolution: Out of Date


> The vault wants write access to the keystore even when not needed
> -----------------------------------------------------------------
>
>                 Key: WFLY-2097
>                 URL: https://issues.jboss.org/browse/WFLY-2097
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 8.0.0.Alpha4
>            Reporter: Tom Fonteyne
>            Assignee: Anil Saldanha
>
> security/src/main/java/org/jboss/as/security/vault/VaultSession.java
> want constant "write" access to the keystore. This is considered to be a security risk.
> We understand this was a requirement to allow upgrades to be done automatically but don't see why the write-access has to be permanent



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)