I think there is a typo in jmx.acl.org.apache.karaf.system.cfg:
1
2 #
3 # JMX ACL specific to the org.apache.karaf:type=system,name=* MBean which maps to the Karaf MBean
4 # to control OSGi bundles.
5 #
6 # For a description of the format of this file, see jmx.acl.cfg
7 #
8 setProperty = admin
9 getPropert* = admin, manager, viewer
10 halt = admin
11 reboot = admin
12 rebootCleanCache = admin
13 rebootCleanCleanAll = admin
The last row probably should be rebootCleanAll = admin