Apache
/
activemq
mirror of https://github.com/apache/activemq.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

AMQ-9201 - Update Jolokia default access configuration

This commit is contained in:
Christopher L. Shannon (cshannon) 2023-02-01 07:04:56 -05:00
parent c58286487d
commit 6120169e56
1 changed files with 33 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
assembly/src/release/conf/jolokia-access.xml
View File

@ -22,8 +22,35 @@
<strict-checking/>
</cors>
<!-- deny calling operations or getting attributes from these mbeans -->
<!-- By default don't allow write or exec operations -->
<commands>
<command>read</command>
<command>list</command>
<command>version</command>
<command>search</command>
</commands>
<allow>
<!-- Allow all operations for the broker itself -->
<mbean>
<name>org.apache.activemq:*</name>
<attribute>*</attribute>
<operation>*</operation>
</mbean>
<!-- Allow all operations for Jolokia Config -->
<mbean>
<name>jolokia:type=Config</name>
<operation>*</operation>
</mbean>
</allow>
<!-- deny all operations or getting attributes from these mbeans -->
<deny>
<mbean>
<name>org.apache.logging.log4j2:*</name>
<attribute>*</attribute>
<operation>*</operation>
</mbean>
<mbean>
<name>com.sun.management:type=DiagnosticCommand</name>
<attribute>*</attribute>
@ -34,6 +61,11 @@
<attribute>*</attribute>
<operation>*</operation>
</mbean>
<mbean>
<name>jdk.management.jfr:type=FlightRecorder</name>
<attribute>*</attribute>
<operation>*</operation>
</mbean>
</deny>
</restrict>