Geronimo must add Java2 security to run with security manager
-------------------------------------------------------------
Key: GERONIMO-3938
URL: https://issues.apache.org/jira/browse/GERONIMO-3938
Project: Geronimo
Issue Type: Bug
Security Level: public (Regular issues)
Components: security
Affects Versions: 2.1
Environment: Windows XP, JDK 1.5
Reporter: Dan Becker
Fix For: Wish List
Attempting to start or stop Geronimo server with a Java 2 security manager
causes Geronimo to throw AccessControlExceptions. This indicates that there are
some priviledged access to system resources within the Geronimo runtime that
are not guarded by AccessController.doPriviledged blocks.
To recreate, switch to Geronimo target bin directory.
Turn on the Java default security manager (e.g.
JAVA_OPTS=-Djava.security.manager -Xms512m -Xmx512m)
Start Geronimo, either geronimo start or gsh.
See exception:
Exception in thread "main" java.lang.ExceptionInInitializerError
Caused by: java.security.AccessControlException: access denied (java.util.Proper
tyPermission org.apache.geronimo.gshell.bootstrap.Launcher.debug read)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
at java.lang.System.getProperty(Unknown Source)
at java.lang.Boolean.getBoolean(Unknown Source)
at org.apache.geronimo.gshell.bootstrap.Launcher.<clinit>(Launcher.java:
32)
Some programming hints given at Tuscany wiki at
http://incubator.apache.org/tuscany/security-aware-programming-in-tuscany.html
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
