Gary Gregory created LOG4J2-2279:
------------------------------------
Summary: Allow SystemPropertiesPropertySource to run with a
SecurityManager that rejects environment variable access
Key: LOG4J2-2279
URL: https://issues.apache.org/jira/browse/LOG4J2-2279
Project: Log4j 2
Issue Type: Bug
Components: API
Affects Versions: 2.10.0
Reporter: Gary Gregory
Assignee: Gary Gregory
Allow {{SystemPropertiesPropertySource}} to run with a SecurityManager that
rejects system property access. This is similar to [LOG4J2-2274].
A security manager can blow up an app like this:
{noformat}
java.lang.ExceptionInInitializerError
at
org.apache.logging.log4j.util.SystemPropertiesPropertySourceSecurityManagerTest.test(SystemPropertiesPropertySourceSecurityManagerTest.java:64)
...
Caused by: java.lang.SecurityException
at
org.apache.logging.log4j.util.SystemPropertiesPropertySourceSecurityManagerTest$TestSecurityManager.checkPermission(SystemPropertiesPropertySourceSecurityManagerTest.java:49)
at
java.lang.SecurityManager.checkPropertiesAccess(SecurityManager.java:1265)
at java.lang.System.getProperties(System.java:624)
at
org.apache.logging.log4j.util.SystemPropertiesPropertySource.forEach(SystemPropertiesPropertySource.java:40)
at
org.apache.logging.log4j.util.PropertiesUtil$Environment.reload(PropertiesUtil.java:330)
at
org.apache.logging.log4j.util.PropertiesUtil$Environment.<init>(PropertiesUtil.java:322)
at
org.apache.logging.log4j.util.PropertiesUtil$Environment.<init>(PropertiesUtil.java:310)
at
org.apache.logging.log4j.util.PropertiesUtil.<init>(PropertiesUtil.java:69)
at
org.apache.logging.log4j.util.PropertiesUtil.<clinit>(PropertiesUtil.java:49)
... 26 more
{noformat}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
