"Read-only", monitoring agent

Costel Cosman mulderika at yahoo.com
Thu Mar 1 14:58:03 UTC 2012


Hi,

About the proposal to have a "read-only", monitoring agent (See RFC:
https://bugzilla.redhat.com/show_bug.cgi?id=783911), I added a comment 
with an additional idea:

===========================================================================
It seems a good idea to have a "read-only" agent.

The proposed solution (to disable the "write" features like Configuration and
Provisioning and leave only "read" features like Monitoring) still has an
issue: malicious code can be embedded in the monitoring part of the plugins. 

An idea would be to sign the plugin JAR. The agent will check the signature
every time a plugin update is performed. The signature will guarantee that the
plugins come only from a trusted source.
============================================================================

What do you think about this idea ?

Regards,
Costel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/rhq-devel/attachments/20120301/e6627348/attachment.html>


More information about the rhq-devel mailing list