+rem #3665 Allow trusted selections in untrusted-mode

This commit is contained in:
Patrik Nordwall 2013-11-06 14:34:07 +01:00
parent 55bb2ebcdb
commit 67393c0fb6
7 changed files with 173 additions and 46 deletions

View file

@ -479,6 +479,14 @@ a denial of service attack). :class:`PossiblyHarmful` covers the predefined
messages like :class:`PoisonPill` and :class:`Kill`, but it can also be added
as a marker trait to user-defined messages.
Messages sent with actor selection are by default discarded in untrusted mode, but
permission to receive actor selection messages can be granted to specific actors
defined in configuration::
akka.remote.trusted-selection-paths = ["/user/receptionist", "/user/namingService"]
The actual message must still not be of type :class:`PossiblyHarmful`.
In summary, the following operations are ignored by a system configured in
untrusted mode when incoming via the remoting layer:
@ -487,6 +495,7 @@ untrusted mode when incoming via the remoting layer:
* ``system.stop()``, :class:`PoisonPill`, :class:`Kill`
* sending any message which extends from the :class:`PossiblyHarmful` marker
interface, which includes :class:`Terminated`
* messages sent with actor selection, unless destination defined in ``trusted-selection-paths``.
.. note::