After upgrading the Nolio NAC and NES servers and agents to 6.8.0 and after removing the log4j-1.2.16.jar files from the actionslib folder, it appears these files are being recreated.
nimi.log shows: DEBUG (com.nolio.nimi.filetransfer.impl.FileTransferManagerImpl:409) - Making sure file with id `fid:####` gets written to `C:\####\CA\ReleaseAutomationAgent\actionslib\log4j-1.2.16.jar`
The log4j-1.2.16.jar is found in some Nexus repositories like:
ReleaseAutomationServer\sonatype-work\nexus\storage\nolio-actions\.nexus\attributes\default_actions_group\log4j\1.2.16
ReleaseAutomationServer\sonatype-work\nexus\storage\nolio-actions\default_actions_group\log4j\1.2.16
Nolio 6.8.0 upgraded from previous releases.
To permanently prevent the log4j-1.2.16.jar files from being recreated:
If the log4j-1.2.16.jar is found in some Nexus repositories like:
ReleaseAutomationServer\sonatype-work\nexus\storage\nolio-actions\.nexus\attributes\default_actions_group\log4j\1.2.16
ReleaseAutomationServer\sonatype-work\nexus\storage\nolio-actions\default_actions_group\log4j\1.2.16
Then after removing the log4j-1.2.16.jar from the action_packs table, the file can also be removed from the Nexus repositories using the Nexus repository manager.
Login to the Nexus repository manager with the admin user.
Then navigate to the log4j-1.2.16.jar file and remove.