Create rule "Windows services or other local OS services"

[agoncal]

It is a best practice for applications running in Azure App Service or Azure Kubernetes Service to be self-contained and not depend on OS-level services. Service Control Manager access is disallowed in the App Service sandbox. Some users install custom Windows services which is not possible in Azure App Service environments and not recommended in containers. Although Java apps are unlikely to interact with Windows services, they should generally not interact with local Linux services.

For .NET, identifying this metadata is possible by looking for use of the System.ServiceProcess namespace.

PRs

Preview Give feedback

1. Refactors the existing OS Specific rule windup-rulesets#63
   rule +1
   
2. Adds a rule about CORBA windup/windup-rulesets#1008
   +0

[showpune]

For Java JNI, override rules from community

1. https://github.com/windup/windup-rulesets/blob/master/rules/rules-reviewed/cloud-readiness/jni-native-code.windup.xml
2. https://github.com/windup/windup-rulesets/blob/master/rules/rules-reviewed/technology-usage/connect-technology-usage.windup.xml

[KaiqianYang]

For windows file path and DLLs, related existing rule: https://github.com/windup/windup-rulesets/blob/master/rules/rules-reviewed/azure/azure-os-specific.windup.xml

[brunoborges]

I believe this rule is about the Java application communicating with an existing process in running in the background, on the OS. This can be done with things like IIOP or localhost HTTP (which is covered in a different ruleset). You may want to look at IIOP and/or RMI. Another solution is D-BUS.

This is substantially different than issue #10 where it talks about launching an external process.

[agoncal]

We have the following rules already:

• Looking for localhost: Check the localhost usage in code #74
• Checking RMI: override java-rmi rule with new msg #92

For CORBA, shall we just look for org.omg.CORBA, javax.rmi.CORBA or PortableRemoteObject ?

For DBus, would we just look into https://www.freedesktop.org/wiki/Software/dbus ? I don't know if this is the right place

[brunoborges]

We can look for CORBA and then close this issue. DBus for after the MVP.

[agoncal]

CORBA PR is on its way: windup/windup-rulesets#1008

I've created a DBus issue for after the MVP: #113