Uploaded image for project: 'Application Server 3 4 5 and 6'
  1. Application Server 3 4 5 and 6
  2. JBAS-4154

Get the server to run under a security manager

    XMLWordPrintable

Details

    • Task
    • Resolution: Done
    • Critical
    • JBossAS-5.1.0.GA
    • JBossAS-5.0.0.Beta1
    • Security
    • None

    Description

      The testsuite tests-security-manager target was failing due to the aop layer not creating classes with correct ProtectionDomains. This is fixed in (JBAOP-368). The next problem is that the server.policy needs to use vfsfile urls for the permission assignments. However, because these are URLs and not URIs, there has to be a URL handler available when the policy is read at bootstrap. Currently a policy entry like:

      grant codeBase "vfsfile:${jboss.home.dir}/lib/-" {
      permission java.security.AllPermission;
      };

      fails because the jboss vfsfile URL handler is unknown:

      policy: Adding policy entry:
      policy: signedBy null
      policy: codeBase vfsfile:/tmp/trunk/build/output/jboss-5.0.0.Beta2/lib/-
      java.security.policy: error adding Entry:
      java.net.MalformedURLException: unknown protocol: vfsfile policy:

      Attachments

        Issue Links

          is blocked by

          Sub-task - The sub-task of the issue JBAS-6894 PerTxEntityInstanceCache->removeTimerServiceIfAllCancelledOrExpired needs privileged blocks

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Bug - A problem that impairs or prevents the functions of the product. SECURITY-322 DelegatingPolicy should merge the Policy Delegate permissions once the jacc context id is available

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          relates to

          Bug - A problem that impairs or prevents the functions of the product. JBVFS-5 VFS is missing privileged blocks

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Task - Represents a small unit of work that is not end-user facing. JBAS-5988 AS5 Codebase Privileged Blocks

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              anil.saldhana Anil Saldanha (Inactive)
              starksm64 Scott Stark (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: