tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From pritesh sharma <prit_sha...@yahoo.com>
Subject additional security permissions when upgrading from 5.0.25 to 5.5.17
Date Mon, 28 Aug 2006 17:00:06 GMT
Hi,
  I had asked this question earlier in the list.
Trying again !!
  I am upgrading tomcat from 5.0.25 to 5.5.17. I have
had to grant java.lang.RuntimePermission
"getClassLoader" permissions to the codebase in
WEBINF/lib because some of the custom defined filters
in web.xml get the following exception:

SEVERE: Exception starting filter
PasswordExpirationFilter
INFO   | jvm 1    | 2006/08/24 13:34:41 |
java.security.AccessControlException: access denied
(java.lang.RuntimePermission getClassLoader)
INFO   | jvm 1    | 2006/08/24 13:34:41 | 	at
java.security.AccessControlContext.checkPermission(Unknown
Source)
INFO   | jvm 1    | 2006/08/24 13:34:41 | 	at
java.security.AccessController.checkPermission(Unknown
Source)
INFO   | jvm 1    | 2006/08/24 13:34:41 | 	at
java.lang.SecurityManager.checkPermission(Unknown
Source)
INFO   | jvm 1    | 2006/08/24 13:34:41 | 	at
java.lang.Class.getClassLoader(Unknown Source)
INFO   | jvm 1    | 2006/08/24 13:34:41 | 	at
org.apache.catalina.loader.WebappClassLoader.findClass(WebappClassLoader.java:904)
INFO   | jvm 1    | 2006/08/24 13:34:41 | 	at
org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1319)
INFO   | jvm 1    | 2006/08/24 13:34:41 | 	at
org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1198)
INFO   | jvm 1    | 2006/08/24 13:34:41 | 	at
java.lang.ClassLoader.loadClassInternal(Unknown
Source)
INFO   | jvm 1    | 2006/08/24 13:34:41 | 	at
com.mycompany.manager.filters.PasswordExpirationFilter.<init>(PasswordExpirationFilter.java:237)
 

I do not need to grant the getClassLoader permission
in 5.0.25. Can some one explain why I need to do so in
5.5.17??

Thank You
Regards
Pritesh

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message