[
https://issues.apache.org/jira/browse/FELIX-1908?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sahoo updated FELIX-1908:
-------------------------
Attachment: felix.preferences.security.patch
All that's missing in the code are a few doPrivileged blocks. A simple patch.
If nobody has objections, I would like to commit it.
> PreferencesService doesn't work if a PermissionAdmin is present
> ---------------------------------------------------------------
>
> Key: FELIX-1908
> URL: https://issues.apache.org/jira/browse/FELIX-1908
> Project: Felix
> Issue Type: Bug
> Components: Preferences Service
> Affects Versions: prefs-1.0.4
> Reporter: Ulf Dittmer
> Attachments: felix.preferences.security.patch,
> FelixPrefsServiceTest.zip
>
>
> If a PermissionAdmin service is present, then a bundle making use of
> PreferencesService currently needs a
> "org.osgi.service.prefs.PreferencesService" "get" ServicePermission (which is
> as it should be), but also a FilePermission for the felix-cache subdirectory
> that contains the data for the PreferencesService bundle. WIthout it, an
> attempt to alter preferences results in a security exception.
> A bundle should not have (or need) file access to another bundle's private
> data.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
