geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dan Becker (JIRA)" <j...@apache.org>
Subject [jira] Created: (GERONIMO-3938) Geronimo must add Java2 security to run with security manager
Date Tue, 25 Mar 2008 15:33:24 GMT
Geronimo must add Java2 security to run with security manager
-------------------------------------------------------------

                 Key: GERONIMO-3938
                 URL: https://issues.apache.org/jira/browse/GERONIMO-3938
             Project: Geronimo
          Issue Type: Bug
      Security Level: public (Regular issues)
          Components: security
    Affects Versions: 2.1
         Environment: Windows XP, JDK 1.5
            Reporter: Dan Becker
             Fix For: Wish List


Attempting to start or stop Geronimo server with a Java 2 security manager causes Geronimo
to throw AccessControlExceptions. This indicates that there are some priviledged access to
system resources within the Geronimo runtime that are not guarded by AccessController.doPriviledged
blocks.

To recreate, switch to Geronimo target bin directory.
Turn on the Java default security manager (e.g. JAVA_OPTS=-Djava.security.manager -Xms512m
-Xmx512m)
Start Geronimo, either geronimo start or gsh.
See exception:
Exception in thread "main" java.lang.ExceptionInInitializerError
Caused by: java.security.AccessControlException: access denied (java.util.Proper
tyPermission org.apache.geronimo.gshell.bootstrap.Launcher.debug read)
        at java.security.AccessControlContext.checkPermission(Unknown Source)
        at java.security.AccessController.checkPermission(Unknown Source)
        at java.lang.SecurityManager.checkPermission(Unknown Source)
        at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
        at java.lang.System.getProperty(Unknown Source)
        at java.lang.Boolean.getBoolean(Unknown Source)
        at org.apache.geronimo.gshell.bootstrap.Launcher.<clinit>(Launcher.java:
32)

Some programming hints given at Tuscany wiki at http://incubator.apache.org/tuscany/security-aware-programming-in-tuscany.html

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message