Hi Arun, Can you file an issue on our issue tracker so that other people can show their interest by staring it, and it will help us to decide priorities.
Thanks, -- Takashi On Mon, Jun 25, 2012 at 2:43 AM, aruncg <[email protected]> wrote: > Hi, > > I am using com.google.security.random.AESRandom to generate random strings > in an appengine app. However, it is not working since it is not able to > read from /dev/urandom. I am pasting the error below. This class was > chosen carefully so that there are no crypto-vulnerabilities exposed. Does > anyone know of a workaround to this problem? > > Thanks, > Arun. > > com.google.security.random.CppSecureRandom seedFromRandFile: Access to seed > file /dev/urandom denied > java.security.AccessControlException: access denied (java.io.FilePermission > /dev/urandom read) > at > java.security.AccessControlContext.checkPermission(AccessControlContext.java:355) > at > java.security.AccessController.checkPermission(AccessController.java:567) > at java.lang.SecurityManager.checkPermission(SecurityManager.java:549) > at > com.google.apphosting.runtime.security.CustomSecurityManager.checkPermission(CustomSecurityManager.java:56) > at java.lang.SecurityManager.checkRead(SecurityManager.java:888) > at java.io.FileInputStream.<init>(FileInputStream.java:133) > at java.io.FileInputStream.<init>(FileInputStream.java:98) > at > com.google.security.random.CppSecureRandom.seedFromRandFile(CppSecureRandom.java:145) > at > com.google.security.random.CppSecureRandom.seedWithURandomFile(CppSecureRandom.java:164) > at com.google.security.random.AESRandom.<init>(AESRandom.java:187) > at > com.google.wireless.mobilegw.smstracker.server.AppengineUtil.generateRandomString(AppengineUtil.java:73) > at > com.google.wireless.mobilegw.smstracker.server.AppengineUtil.generateSmsPassword(AppengineUtil.java:58) > at > com.google.wireless.mobilegw.smstracker.server.RegistrationInfoService.register(RegistrationInfoService.java:81) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke(Method.java:616) > at > com.google.apphosting.runtime.security.shared.intercept.java.lang.reflect.Method_$1.run(Method_.java:165) > at java.security.AccessController.doPrivileged(Native Method) > at > com.google.apphosting.runtime.security.shared.intercept.java.lang.reflect.Method_.privilegedInvoke(Method_.java:163) > at > com.google.apphosting.runtime.security.shared.intercept.java.lang.reflect.Method_.invoke_(Method_.java:124) > at > com.google.apphosting.runtime.security.shared.intercept.java.lang.reflect.Method_.invoke(Method_.java:43) > at > com.google.web.bindery.requestfactory.server.ReflectiveServiceLayer.invoke(ReflectiveServiceLayer.java:182) > at > com.google.web.bindery.requestfactory.server.ServiceLayerDecorator.invoke(ServiceLayerDecorator.java:111) > at > com.google.web.bindery.requestfactory.server.ServiceLayerDecorator.invoke(ServiceLayerDecorator.java:111) > at > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To view this discussion on the web visit > https://groups.google.com/d/msg/google-appengine/-/TGvxU0BIaMYJ. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. -- Takashi Matsuo | Developer Advocate | [email protected] -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
