CRX DE Lite is still accessible even though running AEM 6.1 in Production Ready Mode

[Var]

Hi Adobe,

Am running the AEM 6.1 version in production ready mode in the local server as mentioned in the AEM PROD READY documentation. After startup the jar by command "java -jar aem-author-p4502.jar -r nosamplecontent", i can see there server has been started without any geometrixx sample content but the access to the crx/de is still there and observing on the FELIX console the two bundles (mentioned below) are in active status only. 

Apache Sling Simple WebDAV Access to repositories (org.apache.sling.jcr.webdav)
Apache Sling DavEx Access to repositories (org.apache.sling.jcr.davex)
Do we require to go manually to felix console and stop the bundles ?

VAr

[Alex_Sz1]

Hi VAr,

Yes, those bundles should've been disabled when running in nosamplecontent mode. Not sure why that didn't happen, but you can stop them manually as described in the security checklist here: [1].

[1]: https://docs.adobe.com/docs/en/aem/6-1/administer/security/security-checklist.html#Disable%20WebDAV