pki-servlet-engine/tomcat-8.0-tomcat-users-webapp.patch

--- conf/tomcat-users.xml~	2008-01-28 17:41:06.000000000 -0500
+++ conf/tomcat-users.xml	2008-03-07 19:40:07.000000000 -0500
@@ -23,4 +23,14 @@
   <user username="both" password="<must-be-changed>" roles="tomcat,role1"/>
   <user username="role1" password="<must-be-changed>" roles="role1"/>
 -->
+
+<!-- <role rolename="admin"/> -->
+<!-- <role rolename="admin-gui"/> -->
+<!-- <role rolename="admin-script"/> -->
+<!-- <role rolename="manager"/> -->
+<!-- <role rolename="manager-gui"/> -->
+<!-- <role rolename="manager-script"/> -->
+<!-- <role rolename="manager-jmx"/> -->
+<!-- <role rolename="manager-status"/> -->
+<!-- <user name="admin" password="<must-be-changed>" roles="admin,manager,admin-gui,admin-script,manager-gui,manager-script,manager-jmx,manager-status" /> -->
 </tomcat-users>
- Package now named just tomcat instead of tomcat7 - Removed Provides: %{name}-log4j - Switched to apache-commons-* names instead of jakarta-commons-* . - Remove the old changelog - BR/R java >= 1:1.6.0 , same for java-devel - Removed old tomcat6 crap 2011-04-28 05:35:45 +00:00			`--- conf/tomcat-users.xml~ 2008-01-28 17:41:06.000000000 -0500`
			`+++ conf/tomcat-users.xml 2008-03-07 19:40:07.000000000 -0500`
			`@@ -23,4 +23,14 @@`
Resolves: rhbz#1349469 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service (updates to 8.0.36) 2016-07-01 18:45:28 +00:00			`<user username="both" password="<must-be-changed>" roles="tomcat,role1"/>`
			`<user username="role1" password="<must-be-changed>" roles="role1"/>`
- Package now named just tomcat instead of tomcat7 - Removed Provides: %{name}-log4j - Switched to apache-commons-* names instead of jakarta-commons-* . - Remove the old changelog - BR/R java >= 1:1.6.0 , same for java-devel - Removed old tomcat6 crap 2011-04-28 05:35:45 +00:00			`-->`
			`+`
			`+<!-- <role rolename="admin"/> -->`
			`+<!-- <role rolename="admin-gui"/> -->`
			`+<!-- <role rolename="admin-script"/> -->`
			`+<!-- <role rolename="manager"/> -->`
			`+<!-- <role rolename="manager-gui"/> -->`
			`+<!-- <role rolename="manager-script"/> -->`
			`+<!-- <role rolename="manager-jmx"/> -->`
			`+<!-- <role rolename="manager-status"/> -->`
Resolves: rhbz#1349469 CVE-2016-3092 tomcat: Usage of vulnerable FileUpload package can result in denial of service (updates to 8.0.36) 2016-07-01 18:45:28 +00:00			`+<!-- <user name="admin" password="<must-be-changed>" roles="admin,manager,admin-gui,admin-script,manager-gui,manager-script,manager-jmx,manager-status" /> -->`
- Package now named just tomcat instead of tomcat7 - Removed Provides: %{name}-log4j - Switched to apache-commons-* names instead of jakarta-commons-* . - Remove the old changelog - BR/R java >= 1:1.6.0 , same for java-devel - Removed old tomcat6 crap 2011-04-28 05:35:45 +00:00			`</tomcat-users>`