felix-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ulf Dittmer (JIRA)" <j...@apache.org>
Subject [jira] Reopened: (FELIX-1103) PermissionAdmin service can't handle java.ioFilePermission for "<<ALL FILES>>"
Date Wed, 25 Nov 2009 18:12:39 GMT

     [ https://issues.apache.org/jira/browse/FELIX-1103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Ulf Dittmer reopened FELIX-1103:
--------------------------------


No, it doesn't work - it seems the patch did not get applied to the latest version of the
source.

It's needed because the implies(Permission, Bundle) method performs various modifications
of the path in case of a FilePermission (in the code block that modifies "name" and "postfix").
And since "name" is passed on as parameter of the FilePermission, that would be corrupted
in the case of "<<<ALL FILES>>>", making this special case inoperable.

> PermissionAdmin service can't handle java.ioFilePermission for "<<ALL FILES>>"
> ------------------------------------------------------------------------------
>
>                 Key: FELIX-1103
>                 URL: https://issues.apache.org/jira/browse/FELIX-1103
>             Project: Felix
>          Issue Type: Bug
>          Components: Conditional Permission Admin, Permission Admin
>    Affects Versions: felix-1.6.0
>            Reporter: Ulf Dittmer
>            Assignee: Karl Pauls
>         Attachments: Permissions.diff, Permissions.diff
>
>
> The PermissionAdmin service does not handle java.io.FilePermissions correctly that use
the special "<<ALL FILES>>" syntax for the path. It needs to be special-cased
in the org.apache.felix.framework.security.util.Permissions.implies(Permission, Bundle) method
instead of being interpreted as a regular file name. I've tested that it's sufficient to wrap
all the name/postfix handling in a "if (! "<<ALL FILES>>".equals(name)) { ...
}" block.
> Affected Felix version is 1.4, because that's the last one that works with PermissionAdmin
service. It would affect Felix 1.6 as well if that could be used at all (see bug Felix-1101).
> I'm not sure if this qualifies as a "Major" bug, but there's no easy workaround (which
the online docs say is what makes a "Minor" bug).

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message