c3a41505b7
The current uWSGI Upstart script starts the stats server listening on all IPs. In order to reduce the attack surface, this patch modifies the Upstart script so that the stats server starts listening on localhost only. Closes-Bug: #1288881 Change-Id: I6141e665433d418b8cbecc4f065b8a3710310d29
12 lines
385 B
Plaintext
12 lines
385 B
Plaintext
# Barbican upstart script
|
|
# Used in rpm build. Keep in sync with debian/barbican-api.upstart
|
|
|
|
description "Barbican Key Management APIs"
|
|
start on runlevel [2345]
|
|
stop on runlevel [06]
|
|
|
|
#TODO(jwood) Parameterize the stats port address.
|
|
script
|
|
uwsgi --master --die-on-term --emperor /etc/barbican/vassals --logto /var/log/barbican/barbican-api.log --stats localhost:9314
|
|
end script
|