I took the liberty to use a new mail thread and change the subject to 
something more relevant so that users searching in the archive may find it.

> Hi,
> 
> I try to set up BASE 2.4.6 on debian 4.0 with sun-java 1.5 
> (jdk-1.5.0_10), postgresql 8.1/8.2 and tomcat 5.5.20 (in a virtual machine).
> 

> 2nd problem:
> When I start tomcat with activated security manager the applications 
> does not start because of a security exception (see the attached log).
> 13:22:24,846 ERROR Application:530 - Exception when starting...
> java.security.AccessControlException: access denied 
> (java.lang.reflect.ReflectPermission suppressAccessChecks)
> 
> Is there a way to use the security manager of java/tomcat?

I don't know. We made a few test a long time ago, but never worked out 
what to do. You'll probably have to set permissions in the 
<TOMCAT_HOME>/conf/catalina.policy file.

We have a vision that it should be possible to run BASE with a security 
manager because it would allow us to protect BASE from plug-ins that 
"misbehave". The classical example is that a plug-in may call 
System.exit() and the entire web server will be shut down. The only 
preparation we have made for that is to load external plug-ins in 
separate class loaders. The remaining steps are to figure out what 
permissions BASE itself must be given and to wrap some (or maybe many) 
internal calls with AccessController.doPrivileged(). But this is not on 
our agenda in the immediate future.

So, I recommend that you run Tomcat without a security manager, unless 
you are willing to help us with the last two steps mentioned above.

/Nicklas



-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________
The BASE general discussion mailing list
basedb-users@lists.sourceforge.net
unsubscribe: send a mail with subject "unsubscribe" to
[EMAIL PROTECTED]

Reply via email to