solr: add the '-Ddisable.configEdit=true' option by default to workaround a 0-day exploit.

2017-10-16 16:06:13 +02:00 · 2017-10-16 16:06:13 +02:00 · cf7af19fd2
parent 4d76722d7f
commit cf7af19fd2
1 changed files with 2 additions and 0 deletions
--- a/solr/defaults/main.yml
+++ b/solr/defaults/main.yml
@ -32,6 +32,8 @@ solr_jar_files:
  - contrib/analysis-extras/lib/icu4*.jar
  - contrib/analysis-extras/lucene-libs/lucene-analyzers-icu*.jar

+solr_startup_opts: '-Ddisable.configEdit=true'
+
 solr_set_gc_options: False
 #solr_gc_tune: '-XX:NewRatio=3 -XX:SurvivorRatio=4'
 solr_gc_tune: ''