[Design of POJO Server] - Re: VFS Permissions - JBMICROCONT-149
by anil.saldhana@jboss.com
I have been able to get AS5 started up with the url handler stubs. It worked exactly as DML claimed. Before we inject our version of URLStreamHandlerFactory in AbstractServerImpl, the url handler stubs help in the policy file implementation reading the vfs entries.
As the VFSClassloaderPolicy starts creating CodeSource URLs with the vfs urls, the url stream handler factory would have already been injected thereby flushing the pre-registered vfs handler stubs and the intended vfs handlers are created.
http://anonsvn.jboss.org/repos/jbossas/trunk/testsuite/src/resources/secu... is the updated server security manager policy.
Web class loaders have a codesource url of "vfsfile" while others use "vfszip". We still have some protection domains with file: usage.
At this time, we need no change from CL and VFS projects.
The JDK implementation takes care of a defined vfs policy url such as:
| grant codeBase "vfszip:${jboss.server.home.dir}/lib/-" {
| permission java.security.AllPermission;
| };
|
and implies the following protection code url:
codeBase "vfszip:${jboss.server.home.dir}/lib/some.jar"
Thanks to DML.
Hopefully I should enable the security manager tests tomorrow. Currently, I have 2 out of 67 tests failing (which is not sec mgr related).
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4188645#4188645
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4188645
17 years, 5 months
I had a question about the web service with JBPM
by 晓坚王
Hi,
I got a question that,the user guide says: under jbpm.3/jpdl/ws, there are
web service code of JBPM,
But when I try to check out the jbpm.3,it failed.
The error is :
Empty password used - try 'cvs login' with a real password
cvs checkout: in directory .:
cvs checkout: cannot open CVS/Entries for reading: No such file or directory
what's wrong?
Could any one help me on this or give me a way to check out the code?
Thanks in advance.
James
17 years, 5 months
[Design of POJO Server] - Re: VFS Permissions - JBMICROCONT-149
by anil.saldhana@jboss.com
We used some stub handlers in the Main project with "org.jboss.booturl.xxx" and with the following run command(notice the system property to set the handlers)
-Djava.security.manager -Djava.security.policy==/home/anil/jboss-5.0/jboss-head/testsuite/output/resources/securitymgr/server.policy -Djava.security.debug=access,failure,policy -Djava.protocol.handler.pkgs=org.jboss.booturl
The following vfs entry in the policy file:
| grant codeBase "vfszip:/home/anil/jboss-5.0/jboss-head/build/output/jboss-5.0.0.GA/lib/jboss-aop-asintegration-core.jar" {
| permission java.security.AllPermission;
| };
|
|
>From the security manager logs:
policy:
| policy: Adding policy entry:
| policy: signedBy null
| policy: codeBase vfszip:/home/anil/jboss-5.0/jboss-head/build/output/jboss-5.0.0.GA/lib/jboss-aop-asintegration-core.jar
| access: access allowed (java.util.PropertyPermission java.protocol.handler.pkgsread)
| access: access allowed (java.lang.reflect.ReflectPermission suppressAccessChecks)
| policy: (java.security.AllPermission <all permissions> <all actions>)
| policy:
| policy: Adding policy entry:
| policy: signedBy null
| policy: codeBase file:/home/anil/jboss-5.0/jboss-head/testsuite/output/lib/securitymgr/-
| access: access allowed (java.io.FilePermission /home/anil/jboss-5.0/jboss-head/testsuite/output/lib/securitymgr/- read)
| policy: (java.util.PropertyPermission * read)
| policy: (java.io.FilePermission <<ALL FILES>> read,write,delete)
| policy: (unresolved org.jboss.naming.JndiPermission <<ALL BINDINGS>> lookup)
| policy:
|
So it seems like we can read the vfs entries into the policy file implementation. I need to still get the server to boot and report other problems.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4188627#4188627
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4188627
17 years, 5 months