[ 
https://issues.apache.org/jira/browse/IGNITE-4537?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15830207#comment-15830207
 ] 

Denis Magda commented on IGNITE-4537:
-------------------------------------

Well, let's pass all the properties that start with "java.", "os." and "user.". 
The rest can be skipped.

> Update Notifier must not transfer system properties
> ---------------------------------------------------
>
>                 Key: IGNITE-4537
>                 URL: https://issues.apache.org/jira/browse/IGNITE-4537
>             Project: Ignite
>          Issue Type: Bug
>            Reporter: Denis Magda
>            Assignee: Dmitry Karachentsev
>            Priority: Critical
>             Fix For: 1.9
>
>
> Apache Ignite Update Notifier that is used for sending updates about new 
> Apache Ignite versions gathers and transfers all system properties.
> The script must not do this. Instead, it has to get only those system 
> properties like Java version, OS versions that are needed. Otherwise, the 
> script might send sensitive information like passwords stored in the system 
> properties.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to