movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-13 13:40:28 +03:00
Code Activity

unifi5: Follow new mitigation guidelines

Browse source 
Simply disabling lookups isn't enough, and the JndiLookup class must be
removed:

https://web.archive.org/web/20211217085954/https://logging.apache.org/log4j/2.x/security.html
This commit is contained in:
Zhaofeng Li 2021-12-17 15:55:13 -08:00
parent 7cb82ec614
commit a4bcad541e
2 changed files with 9 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

1
nixos/modules/services/networking/unifi.nix
View file

@ -7,7 +7,6 @@ let
@${cfg.jrePackage}/bin/java java \
${optionalString (cfg.initialJavaHeapSize != null) "-Xms${(toString cfg.initialJavaHeapSize)}m"} \
${optionalString (cfg.maximumJavaHeapSize != null) "-Xmx${(toString cfg.maximumJavaHeapSize)}m"} \
${optionalString (lib.versionOlder cfg.unifiPackage.version "6.5.54") "-Dlog4j2.formatMsgNoLookups=true"} \
-jar ${stateDir}/lib/ace.jar
'';
in