Can you folks retrofit ClassLoaderPolicy, VFSClassLoaderPolicy to take in the settings from the system property (java.security.debug which can have entries such as:
| - access âprint all checkPermission results
| - jar âprint jar verification information
| - policy âprint policy information
| - scl âprint permissions assigned by the SecureClassLoader
|
| The access option has the following sub-options:
| - stack âinclude stack trace
| - domain âdump all domains in context
| - failure âdump the stack and domain that did not have permission before throwing the exception
|
| For example, to print all checkPermission results and trace all domains in context, set java.security.debug to access,stack. To trace access failures, set it to access,failure.
|
I was looking at this source file:
http://anonsvn.jboss.org/repos/jbossas/projects/jboss-cl/trunk/classloadi...
Additionally, the getProtectionDomain method was supposed to handle certificates with a todo of JBMICROCONT-182 (which has been completed)
https://jira.jboss.org/jira/browse/JBMICROCONT-182
So I created a subtask for this:
https://jira.jboss.org/jira/browse/JBMICROCONT-381
Ales, can I know how this classloader policy is being installed? I could not figure out from the xmls in the conf directory.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4187526#4187526
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4187526
"david.lloyd(a)jboss.com" wrote :
| If you make the stop() method run privileged, won't you make it kind of easy to defeat the security manager (by simply undeploying the bean, or even just getting the bean by name, or creating an instance of it, and manually calling stop() on it from hostile code)?
|
That's a different issue. We already said that we need a permission
within the MC that controls who can inject/install what into what or who can
invoke on what through the kernel bus.
Currently there's no fine-grained permission, only one big permission
on whether you can access the kernel(controller).
Ales do you have a JIRA for that? Or have you already done it without me
noticing as usual? ;-)
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4187505#4187505
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4187505