Re: Security Questions - Ant
Stefan Bodewig <[email protected]>
| Newsgroups | gmane.comp.jakarta.ant.user |
|---|---|
| Message-ID | <[email protected]> |
Hi Jack On 2018-11-27, Jack O'Connor wrote: > 1) Is the software compliant with U.S. Federal Information Processing > Standard (FIPS) 140-2? It is not certified in any way. Not sure what "is compliant" means but the I guess the answer is somewhere between "we don't know" and "no". > 2) Is any third party software bundled with the software? The binary distribution doesn't bundle any additional software, the source distribution contains JUnit and Hamcrest jars in lib/optional. > 3) Can the software export security related audit trails to external > collection systems, such as syslog or ArcSight? Not by itself. It would be possible to write a Logger/Listener that did but the Ant team doesn't provide one. > 5) Are user accounts required or optional? Apache Ant is a command line tool designed to be run by software developers during their development work. It is not a server process. Stefan