Fixes are available
PK54499: WebContainer option to override fileservingenabled="true"
Java SDK 1.5 SR8 Cumulative Fix for WebSphere Application Server
Java SDK 1.5 SR8 Cumulative Fix for WebSphere Application Server
Java SDK 1.5 SR10 Cumulative Fix for WebSphere Application Server
6.1.0.31: Java SDK 1.5 SR11 FP1 Cumulative Fix for WebSphere Application Server
6.1.0.33: Java SDK 1.5 SR12 FP1 Cumulative Fix for WebSphere
6.1.0.29: Java SDK 1.5 SR11 Cumulative Fix for WebSphere Application Server
6.1.0.35: Java SDK 1.5 SR12 FP2 Cumulative Fix for WebSphere
6.1.0.37: Java SDK 1.5 SR12 FP3 Cumulative Fix for WebSphere
6.1.0.39: Java SDK 1.5 SR12 FP4 Cumulative Fix for WebSphere Application Server
6.1.0.41: Java SDK 1.5 SR12 FP5 Cumulative Fix for WebSphere Application Server
6.1.0.43: Java SDK 1.5 SR13 Cumulative Fix for WebSphere Application Server
6.1.0.45: Java SDK 1.5 SR14 Cumulative Fix for WebSphere Application Server
6.1.0.47: WebSphere Application Server V6.1 Fix Pack 47
6.1.0.47: Java SDK 1.5 SR16 Cumulative Fix for WebSphere Application Server
APAR status
Closed as program error.
Error description
This APAR provides the option to disable the setting fileServingEnabled at the webcontainer level. This setting will override fileServingEnabled="true".
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: IBM WebSphere Application Server file * * serving * * users. * **************************************************************** * PROBLEM DESCRIPTION: There is no way to override all * * * * applications on a given applicat * * ion server * * to prevent them from serving * * static files regardle * * ss of their * * individual deployment settings. * * * **************************************************************** * RECOMMENDATION: * * * **************************************************************** The WebContainer allows for fileServingEnabled to be set on a global level across a given application server. But, that custom property is overridden by the specific deployment information of each application. Thus, the current property only applies as a backup in case an application does not define the fileServingEnabled setting itself. There is no way to globally override this setting on a given application server.
Problem conclusion
A new WebContainer custom property has been added that disallows file serving on all applications (except the administration console) on a given application server. Set the new WebContainer custom property com.ibm.ws.webcontainer.disallowAllFileServing to true to disable all file serving on a given application server. This custom property is not case sensitive. Please refer to the following technote for instructions on enabling WebContainer custom properties: http://www.ibm.com/support/docview.wss?rss=180&uid=swg21284395 The fix for this APAR is currently targeted for inclusion in fixpacks 5.1.1.17, 6.0.2.25 and 6.1.0.15. Please refer to the recommended updates page for delivery information: http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
Temporary fix
Comments
APAR Information
APAR number
PK54499
Reported component name
WEBS APP SERV N
Reported component ID
5724H8800
Reported release
60I
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2007-10-10
Closed date
2007-11-16
Last modified date
2007-11-16
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WEBS APP SERV N
Fixed component ID
5724H8800
Applicable component levels
R60A PSY
UP
R60H PSY
UP
R60I PSY
UP
R60P PSY
UP
R60S PSY
UP
R60W PSY
UP
R60Z PSY
UP
R61A PSY
UP
R61H PSY
UP
R61I PSY
UP
R61P PSY
UP
R61S PSY
UP
R61W PSY
UP
R61Z PSY
UP
Document Information
Modified date:
29 December 2021