Bug#839778: jetty: Misleading comments in /etc/default/jetty

[Emmanuel Bourg]

Le 4/10/2016 à 22:18, Chris Chiappa a écrit :

> /etc/default/jetty says:
> 
> # Listen to connections from this network host
> # Use 0.0.0.0 as host to accept all connections.
> # Uncomment to restrict access to localhost
> #JETTY_HOST=$(uname -n)
> 
> However, setting JETTY_HOST to the actual host name causes it to still
> be reachable from third party hosts.  I need to explicitly set it to
> "localhost" to get it to only be reachable from localhost.

Hi Chris,

Thank you for the feedback. Note that Jetty 6 is quite old and has been
removed from the next stable release (Stretch). Switching to the jetty8
package (or jetty9 in the Jessie backports) is recommended. jetty8 has
the same comment in its /etc/default file and is probably affected by
the same issue, but the JETTY_HOST variable has been removed from the
jetty9 package (the host is now configured in the /etc/jetty9/start.ini
file).

Emmanuel Bourg