RE: [Openjmx-devel] RMI adaptor and remote notifications

[Carlos Q. <Car...@ge...>]

> -----Original Message-----
> From: Bordet, Simone [mailto:Sim...@co...]
> Sent: 30 January 2002 15:38
> To: OpenJMX-Dev (E-mail)
> Subject: RE: [Openjmx-devel] RMI adaptor and remote notifications
>=20
> Hi,
>=20
> > > Look at this filter
> > >
> > > class MyFilter implements NotificationFilter
> > > {
> > >    public boolean isNotificationEnabled(Notification n)
> > >    {
> > >       List l =3D MBeanServerFactory.findMBeanServer(null);
> > >       for (Iterator i =3D l.iterator(); i.hasNext();)
> > >       {
> > >          MBeanServer s =3D (MBeanServer)i.next();
> > >          MBeanServerFactory.releaseMBeanServer(s);
> > >       }
> > >       return true;
> > >    }
> > > }
> > Would you upload this code to the Agent?
>=20
> If you serialize the filter it is uploaded to the agent, yes.
My scenario is with the agent running in some server and the client
(Let's say a swing app) writes the filter above and adds a listener.
Then the listener will be serialized and sent to the agent. Are we
talking about the same idea?

>=20
> > How using for instance a web
> > server in the codebase?
>=20
> Not following.
Obviously you cannot just send a serialized object to the agent and
expect it to know how to deserialize it and execute. You have to also
download the class definition which may be available in a web server. If
you don't allow this then the code has to be introduced beforehand and
is therefore trusted. Maybe you could clarify this but I think this
scenario always calls for a security manager

>=20
> > I think this will be always a problem using RMI, and you
> > would normally
> > run it with a security manager.
>=20
> No, if the filter is remote.
>=20
> > There are many other things
> > that can be
> > done if you are uploading code (spyware, viruses, etc...)
>=20
> Yes, so ?
My point is that this problem is much broader than only the filter. You
could upload a MBean which does something similar

>=20
> Remote filters ?
>=20
> Simon
>=20
> _______________________________________________
> Openjmx-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openjmx-devel