"Read-only", monitoring agent

John Mazzitelli jmazzite at redhat.com
Thu Mar 1 16:29:28 UTC 2012


On Thu, 2012-03-01 at 07:59 -0800, Costel Cosman wrote:
> I know that maybe is exaggerated, but what if an attacker finds out
> the password of the rhqadmin or any other user that has rights to
> upload plugins ?
> In that case SSL security doesn't help as long the attacker can upload
> any plugin.

“The only truly secure system is one that is powered off, cast in a
block of concrete and sealed in a lead-lined room with armed guards.”

– Gene Spafford





More information about the rhq-devel mailing list