Doron Fediuck has posted comments on this change.

Change subject: packaging: Move ROOT.war to the EAR
......................................................................


Patch Set 1:

Juan,
I'm not sure we're allowed to run-over the root context
of the machine. This will collide with IPA as well as any
other web server.

WRT the ca certificate and ssh key file, I actually prefer
to cp it, than to allow a web servlet into the PKI area. The
PKI area should be accessed as little as possible, only
when needed. So when a new certificate is needed, it makes
sense to allow the backend some access into this area. Other
than that, it's better to put other areas in danger of sec issues and file 
corruption than the PKI area.

--
To view, visit http://gerrit.ovirt.org/3782
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: I1d3aa9af7b78546b5449031c8db23ff766b68496
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Juan Hernandez <juan.hernan...@redhat.com>
Gerrit-Reviewer: Doron Fediuck <dfedi...@redhat.com>
_______________________________________________
Engine-patches mailing list
Engine-patches@ovirt.org
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to