DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21197>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=21197 SMTPAppender needs only one property but reads too many Summary: SMTPAppender needs only one property but reads too many Product: Log4j Version: 1.2 Platform: All OS/Version: All Status: NEW Severity: Normal Priority: Other Component: Appender AssignedTo: [EMAIL PROTECTED] ReportedBy: [EMAIL PROTECTED] SMTPAppender reads all of the system properties in method activateOptions in order to setup mail service. This is not necessary because only property mail.smtp.host is required. There is a potential security issue when Java Security Manager is enabled. In policy file, the specific codeBase has to be granted PropertyPermission of read and write for all system properties. This bug was found when starting Tomcat with -security. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]