[
https://issues.apache.org/jira/browse/SOLR-15875?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
David Smiley updated SOLR-15875:
--------------------------------
Summary: Gate defaults on an "env" (mode) for Solr: prod, dev, test (was:
Gate defaults on a "env" for Solr: prod, dev)
> Gate defaults on an "env" (mode) for Solr: prod, dev, test
> ----------------------------------------------------------
>
> Key: SOLR-15875
> URL: https://issues.apache.org/jira/browse/SOLR-15875
> Project: Solr
> Issue Type: Improvement
> Reporter: David Smiley
> Priority: Major
>
> In an effort to increase Solr's security posture, yet also retain convenient
> ease-of-use defaults, I propose that a Solr node may be started with an
> environment setting to differentiation production from development; perhaps
> others. This ought to be a 1st class bin/solr CLI flag. Certain settings
> that are security sensitive can then gate the default based on being in dev
> mode or not. Possible examples are enabling the Java SecurityManager, Solr's
> runtime config APIs, port binding to local-host or not,
> enable.dih.dataConfigParam.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
