[Freeipa-users] Re: Is FreeIPA affected by log4shell?
On su, 12 joulu 2021, Sam Morris via FreeIPA-users wrote:
What's the full path to those files exactly? My RHEL 8 IdM
(FreeIPA) servers (with CA) don't have any log4j jars:
$ sudo find / -xdev -type f -name '*log*.jar'
/usr/share/java/commons-logging-adapters.jar
/usr/share/java/commons-logging-api.jar
/usr/share/java/commons-logging.jar
/usr/share/java/jboss-logging/jboss-logging.jar
/usr/share/java/jboss-logging-tools/jboss-logging-annotations.jar
/usr/share/java/jboss-logging-tools/jboss-logging-processor.jar
FreeIPA doesn't use Java at all. Dogtag does but it uses SLF4J library to
wrap around different logging mechanisms.
By default, Dogtag would use slf4j-jdk14 bindings, e.g. defaulting to
java.util.logging use.
As far as I can see, this is true for RHEL 7 and RHEL 8.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland