Return-Path: X-Original-To: apmail-db-derby-dev-archive@www.apache.org Delivered-To: apmail-db-derby-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id EE2F091B7 for ; Wed, 8 Feb 2012 22:13:24 +0000 (UTC) Received: (qmail 79608 invoked by uid 500); 8 Feb 2012 22:13:24 -0000 Delivered-To: apmail-db-derby-dev-archive@db.apache.org Received: (qmail 79530 invoked by uid 500); 8 Feb 2012 22:13:24 -0000 Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: Delivered-To: mailing list derby-dev@db.apache.org Received: (qmail 79522 invoked by uid 99); 8 Feb 2012 22:13:24 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 08 Feb 2012 22:13:24 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED,T_RP_MATCHES_RCVD X-Spam-Check-By: apache.org Received: from [140.211.11.116] (HELO hel.zones.apache.org) (140.211.11.116) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 08 Feb 2012 22:13:21 +0000 Received: from hel.zones.apache.org (hel.zones.apache.org [140.211.11.116]) by hel.zones.apache.org (Postfix) with ESMTP id 1403E1AB47A for ; Wed, 8 Feb 2012 22:13:00 +0000 (UTC) Date: Wed, 8 Feb 2012 22:13:00 +0000 (UTC) From: "Kathey Marsden (Commented) (JIRA)" To: derby-dev@db.apache.org Message-ID: <554859573.16894.1328739180083.JavaMail.tomcat@hel.zones.apache.org> In-Reply-To: <1558981021.62226.1327105120082.JavaMail.tomcat@hel.zones.apache.org> Subject: [jira] [Commented] (DERBY-5582) Access denied (java.lang.RuntimePermission modifyThreadGroup) in IndexStatisticsDaemonImpl.schedule() MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/DERBY-5582?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13204050#comment-13204050 ] Kathey Marsden commented on DERBY-5582: --------------------------------------- Thank you Kristian for looking at the patch. That is correct regarding the condition. We want the main thread to be able to make the original thread created in main to be in the privtg group but not other ones. Regarding the formatting. SecurityManagerSetup has become such a mix of tabs and spaces that it is hard to figure out. Would anyone object to a reformating patch to change this one to just spaces. You lose some history in annotation on trunk but could always go back to other branches for the annotation if that is needed. > Access denied (java.lang.RuntimePermission modifyThreadGroup) in IndexStatisticsDaemonImpl.schedule() > ------------------------------------------------------------------------------------------------------ > > Key: DERBY-5582 > URL: https://issues.apache.org/jira/browse/DERBY-5582 > Project: Derby > Issue Type: Bug > Components: Services > Affects Versions: 10.8.2.3 > Reporter: Kathey Marsden > Attachments: Derby5582Runner.java, MySecurityManager.java, derby-5582_10_8_try1_diff.txt, derby-5582_trunk_withtest_diff.txt, derby-5582_trunk_withtest_diff.txt, derby5582.policy > > > I user reported this exception with 10.8.2.3 - (1212722) when running regression tests against 10.8. > As soon as the Index Statistics Thread was initialized they got the stack trace below. > There was some discussion of this issue on the dev list: > http://old.nabble.com/Report-of-security-manager-issue-with-10.8-and-ndexStatisticsDaemonImpl.schedule-to33137398.html > I assume the failure is in > runningThread = new Thread(this, "index-stat-thread"); > Stack Trace: > java.security.AccessControlException: Access denied > (java.lang.RuntimePermission modifyThreadGroup) > at > java.security.AccessController.checkPermission(AccessController.java:108) > at > java.lang.SecurityManager.checkPermission(SecurityManager.java:544) > at > com.ibm.ws.security.core.SecurityManager.checkPermission(SecurityManager.java:208) > at > com.ibm.ws.security.core.SecurityManager.checkAccess(SecurityManager.java:407) > at java.lang.ThreadGroup.checkAccess(ThreadGroup.java:226) > at java.lang.Thread.initialize(Thread.java:345) > at java.lang.Thread.(Thread.java:281) > at java.lang.Thread.(Thread.java:179) > at > org.apache.derby.impl.services.daemon.IndexStatisticsDaemonImpl.schedule(Unknown > Source) > at > org.apache.derby.impl.sql.GenericStatement.prepMinion(Unknown Source) > at org.apache.derby.impl.sql.GenericStatement.prepare(Unknown > Source) > at > org.apache.derby.impl.sql.conn.GenericLanguageConnectionContext.prepareInternalStatement(Unknown > Source) > at > org.apache.derby.impl.jdbc.EmbedPreparedStatement.(Unknown Source) > at > org.apache.derby.impl.jdbc.EmbedPreparedStatement20.(Unknown Source) > at > org.apache.derby.impl.jdbc.EmbedPreparedStatement30.(Unknown Source) > at > org.apache.derby.impl.jdbc.EmbedPreparedStatement40.(Unknown Source) > at > org.apache.derby.jdbc.Driver40.newEmbedPreparedStatement(Unknown Source) > at > org.apache.derby.impl.jdbc.EmbedConnection.prepareStatement(Unknown Source) > at > org.apache.derby.impl.jdbc.EmbedConnection.prepareStatement(Unknown Source) > at -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira