Finishing up the story. The backporting of patches from r6020 of SVN for Resin 4.0.2 and recompiling Resin worked just fine and permissions issue has gone. It would be very nice to have bug #3657 fixed in the upcoming resin 3.1.10 as well.

 

 

02.12.09, 14:56, "Artamonov Vlad" <vla...@yandex.ru>:

Just to continue the one side discussion. Are there instructions on how to build Resin from sources and what dependencies are required for that?

Best Wishes,
Vlad

28.11.09, 09:27, "Artamonov Vlad" :
Looks like the issue appears to be fixed in http://bugs.caucho.com/view.php?id=3657 as of August 28. However, the latest snapshot of Resin 3.1 available is dated by July, 15. I am wondering how obtain this change?

>
> Hi,
>
> We have a security policy for Resin running on our servers. This policy causes JSP compilation to be blocked for Resin 3.1, although it works fine on Resin 2. The issue appears to be caused by Active CodeSource set to null during the compilation of JSP page. Did somebody happen to find a workaround for this?
>
> Additional details:
>
> CentOS 4, Resin 3.1.9, jdk1.6.0_17
>
> Java security policy debug for failed JSP compilation attempt:
>
> policy: evaluation (codesource/principals) passed
> policy: evaluate codesources:
> Policy CodeSource: (file:/usr/resin/resin-3.1.9/- )
> Active CodeSource: (null )
> policy: evaluation (codesource) failed
> policy: evaluate codesources:
> Policy CodeSource: (file:/home/test/- )
> Active CodeSource: (null )
> policy: evaluation (codesource) failed
> policy: evaluate codesources:
> Policy CodeSource: (file:/usr/java/jdk1.6.0_17/jre/lib/ext/* )
> Active CodeSource: (null )
> policy: evaluation (codesource) failed
> policy: evaluate codesources:
> Policy CodeSource: (file:/usr/java/packages/lib/ext/* )
> Active CodeSource: (null )
> policy: evaluation (codesource) failed
> policy: evaluate codesources:
> Policy CodeSource: (null )
> Active CodeSource: (null )
> policy: evaluate principals:
> Policy Principals: []
> Active Principals: []
> policy: granting (java.lang.RuntimePermission stopThread)
> policy: granting (java.net.SocketPermission localhost:1024- listen,resolve)
> policy: granting (java.util.PropertyPermission java.version read)
> policy: granting (java.util.PropertyPermission java.vendor read)
> policy: granting (java.util.PropertyPermission java.vendor.url read)
> policy: granting (java.util.PropertyPermission java.class.version read)
> policy: granting (java.util.PropertyPermission os.name read)
> policy: granting (java.util.PropertyPermission os.version read)
> policy: granting (java.util.PropertyPermission os.arch read)
> policy: granting (java.util.PropertyPermission file.separator read)
> policy: granting (java.util.PropertyPermission path.separator read)
> policy: granting (java.util.PropertyPermission line.separator read)
> policy: granting (java.util.PropertyPermission java.specification.version read)
> policy: granting (java.util.PropertyPermission java.specification.vendor read)
> policy: granting (java.util.PropertyPermission java.specification.name read)
> policy: granting (java.util.PropertyPermission java.vm.specification.version read)
> policy: granting (java.util.PropertyPermission java.vm.specification.vendor read)
> policy: granting (java.util.PropertyPermission java.vm.specification.name read)
> policy: granting (java.util.PropertyPermission java.vm.version read)
> policy: granting (java.util.PropertyPermission java.vm.vendor read)
> policy: granting (java.util.PropertyPermission java.vm.name read)
> policy: evaluation (codesource/principals) passed
> [11:18:56.134] java.security.AccessControlException: access denied (java.io.FilePermission /home/test/public_html/WEB-INF/work read)
> [11:18:56.134] at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
> [11:18:56.134] at java.security.AccessController.checkPermission(AccessController.java:546)
> 11:18:56.134] at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
> [11:18:56.134] at java.lang.SecurityManager.checkRead(SecurityManager.java:871)
> [11:18:56.134] at java.io.File.isDirectory(File.java:752)
> [11:18:56.134] at com.caucho.vfs.FilePath.isDirectory(FilePath.java:330)
> [11:18:56.134] at com.caucho.loader.SimpleLoader.buildClassPath(SimpleLoader.java:248)
> [11:18:56.134] at com.caucho.loader.Loader.buildSourcePath(Loader.java:215)
> [11:18:56.134] at com.caucho.loader.DynamicClassLoader.buildResourcePathSpecificFirst(DynamicClassLoader.java:986)
> [11:18:56.134] at com.caucho.loader.DynamicClassLoader.getResourcePathSpecificFirst(DynamicClassLoader.java:956)
> [11:18:56.134] at _jsp._jsp__jsp.init(_jsp__jsp.java:110)
> [11:18:56.134] at com.caucho.jsp.JspManager.loadPage(JspManager.java:397)
> [11:18:56.134] at com.caucho.jsp.JspManager.compile(JspManager.java:247)
> [11:18:56.134] at com.caucho.jsp.JspManager.createPage(JspManager.java:171)
> [11:18:56.134] at com.caucho.jsp.JspManager.createPage(JspManager.java:150)
> [11:18:56.134] at com.caucho.jsp.PageManager.getPage(PageManager.java:248)
> [11:18:56.134] at com.caucho.jsp.PageManager.getPage(PageManager.java:178)
>
>
> Best Regards,
> Vlad
>
>
> _______________________________________________
> resin-interest mailing list
> resin-interest@caucho.com
> http://maillist.caucho.com/mailman/listinfo/resin-interest
>
>



--
Здесь спама нет http://mail.yandex.ru/nospam/sign
_______________________________________________
resin-interest mailing list
resin-interest@caucho.com
http://maillist.caucho.com/mailman/listinfo/resin-interest

Reply via email to