Uploaded image for project: 'Application Server 3  4  5 and 6'
  1. Application Server 3 4 5 and 6
  2. JBAS-4154

Get the server to run under a security manager

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Done
    • Icon: Critical Critical
    • JBossAS-5.1.0.GA
    • JBossAS-5.0.0.Beta1
    • Security
    • None

      The testsuite tests-security-manager target was failing due to the aop layer not creating classes with correct ProtectionDomains. This is fixed in (JBAOP-368). The next problem is that the server.policy needs to use vfsfile urls for the permission assignments. However, because these are URLs and not URIs, there has to be a URL handler available when the policy is read at bootstrap. Currently a policy entry like:

      grant codeBase "vfsfile:${jboss.home.dir}/lib/-" {
      permission java.security.AllPermission;
      };

      fails because the jboss vfsfile URL handler is unknown:

      policy: Adding policy entry:
      policy: signedBy null
      policy: codeBase vfsfile:/tmp/trunk/build/output/jboss-5.0.0.Beta2/lib/-
      java.security.policy: error adding Entry:
      java.net.MalformedURLException: unknown protocol: vfsfile policy:

            anil.saldhana Anil Saldanha (Inactive)
            starksm64 Scott Stark (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: