[SOLVED] How to harden Jboss?

szboardstretcher · 08-01-2011, 12:01 PM

I've seen a few articles out there, but most are old and out of date.

What needs to be done, specifically, to Jboss to ready it for deployment?

Ive alreday removed the jmx-console, web-console and jbosswc. What else would you remove/change to ready it for real production? (Jboss 4.2)

kbp · 08-01-2011, 08:19 PM

There's a security guide for EAP 5, a lot of it should still apply to 4.2 - http://docs.redhat.com/docs/en-US/JB...ide/index.html

and also a Common Criteria configuration guide for EAP 4.3 - http://docs.redhat.com/docs/en-US/JB...ide/index.html

cheers