DO NOT REPLY [Bug 41096] New: - security problem with javamail

[bugzilla]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=41096>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=41096

           Summary: security problem with javamail
           Product: Tomcat 5
           Version: 5.5.20
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: major
          Priority: P2
         Component: Catalina
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: [EMAIL PROTECTED]


Hi,

I'm trying to secure a Tomcat installation with javamail in ./shared dir.

I tried this code without any success:
grant codeBase "file:${catalina.home}/shared/-" {
  permission java.lang.RuntimePermission "accessClassInPackage.*";
  permission java.security.AllPermission;
};

I alway obtain this error:

java.security.AccessControlException: access denied (java.lang.RuntimePermission
acce
ssClassInPackage.sun.net.smtp)
        at
java.security.AccessControlContext.checkPermission(AccessControlContext.ja
va:264)
        at 
java.security.AccessController.checkPermission(AccessController.java:427)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at 
java.lang.SecurityManager.checkPackageAccess(SecurityManager.java:1512)
        at 
org.apache.jasper.servlet.JasperLoader.loadClass(JasperLoader.java:113)
        at 
org.apache.jasper.servlet.JasperLoader.loadClass(JasperLoader.java:65)
        at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
....

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]