December 2015 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFLY-5771) IIOP operations need SerializablePermission("enableSubclassImplementation")

by Ivo Studensky (JIRA)

[ https://issues.jboss.org/browse/WFLY-5771?page=com.atlassian.jira.plugin.... ] Ivo Studensky commented on WFLY-5771: ------------------------------------- Similar fix has to be done for Narayana as well, see JBTM-2577. > IIOP operations need SerializablePermission("enableSubclassImplementation") > --------------------------------------------------------------------------- > > Key: WFLY-5771 > URL: https://issues.jboss.org/browse/WFLY-5771 > Project: WildFly > Issue Type: Bug > Components: IIOP, Transactions > Affects Versions: 10.0.0.CR4 > Reporter: Ivo Studensky > Assignee: Ivo Studensky > > Since JDK 7u25 version {{org.omg.CORBA_2_3.portable.Output/InputStream}} classes need extra permissions if Security Manager is enabled. Because of a previous vulnerability, it now checks {{SerializablePermission("enableSubclassImplementation")}}. There is a property flag to allow subclass instantiations without the security check (jdk.corba.allowOutputStreamSubclass=true), but this system property is subject to removal in the future Java releases, according to my findings. > At the moment, our IIOP code fails (can be seen in iiop tests of WildFly testsuite) when running with SM enabled. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-5521) Tests from IIOP module fails with security manager

by Ivo Studensky (JIRA)

[ https://issues.jboss.org/browse/WFLY-5521?page=com.atlassian.jira.plugin.... ] Ivo Studensky commented on WFLY-5521: ------------------------------------- I've filed PR with a fix for IIOPSecurityInvocationTestCase. Remaining issues in IIOP tests are covered by WFLY-5771 and JBTM-2577. > Tests from IIOP module fails with security manager > -------------------------------------------------- > > Key: WFLY-5521 > URL: https://issues.jboss.org/browse/WFLY-5521 > Project: WildFly > Issue Type: Bug > Components: Test Suite > Affects Versions: 10.0.0.CR2 > Reporter: Marek Kopecký > Assignee: Ivo Studensky > Attachments: IIOP.tests.txt > > > *Description of problem:* > Tests from IIOP module fails with security manager. > *How reproducible:* > Always > *Steps to Reproduce:* > # ./integration-tests.sh -Dmaven.repo.local=$MAVEN_REPO_LOCAL -fae -Dmaven.test.failure.ignore=true -Dnode0=$MYTESTIP_1 -Dnode1=$MYTESTIP_2 -Dmcast=$MCAST_ADDR -Djboss.dist=$JBOSS_DIST -Dsecurity.manager -Dts.IIOP -Dts.noSmoke > *Actual results:* > See attached file > *Expected results:* > No errors -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (DROOLS-996) Default Stateless Session in Kie Server

by Justin Goldsmith (JIRA)

[ https://issues.jboss.org/browse/DROOLS-996?page=com.atlassian.jira.plugin... ] Justin Goldsmith updated DROOLS-996: ------------------------------------ Component/s: kie server Affects Version/s: 6.3.0.Final > Default Stateless Session in Kie Server > --------------------------------------- > > Key: DROOLS-996 > URL: https://issues.jboss.org/browse/DROOLS-996 > Project: Drools > Issue Type: Feature Request > Components: kie server > Affects Versions: 6.3.0.Final > Reporter: Justin Goldsmith > Assignee: Justin Goldsmith > Priority: Minor > > When executing against a container in kie server if the default session is stateful you do not have to provide a lookup, but if the default session is stateless it throws an exception stating there is no default session. While this is easy to work around its not intuitive. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (DROOLS-996) Default Stateless Session in Kie Server

by Justin Goldsmith (JIRA)

Justin Goldsmith created DROOLS-996: --------------------------------------- Summary: Default Stateless Session in Kie Server Key: DROOLS-996 URL: https://issues.jboss.org/browse/DROOLS-996 Project: Drools Issue Type: Feature Request Reporter: Justin Goldsmith Assignee: Justin Goldsmith Priority: Minor When executing against a container in kie server if the default session is stateful you do not have to provide a lookup, but if the default session is stateless it throws an exception stating there is no default session. While this is easy to work around its not intuitive. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-5771) IIOP operations need SerializablePermission("enableSubclassImplementation")

by Ivo Studensky (JIRA)

[ https://issues.jboss.org/browse/WFLY-5771?page=com.atlassian.jira.plugin.... ] Ivo Studensky commented on WFLY-5771: ------------------------------------- stacktrace: {noformat} at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:271) at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175) at org.omg.CORBA_2_3.portable.InputStream.checkPermission(InputStream.java:67) at org.omg.CORBA_2_3.portable.InputStream.<init>(InputStream.java:84) at com.sun.corba.se.impl.encoding.CDRInputStream.<init>(CDRInputStream.java:116) at com.sun.corba.se.impl.encoding.EncapsInputStream.<init>(EncapsInputStream.java:66) at com.sun.corba.se.impl.encoding.EncapsInputStream.<init>(EncapsInputStream.java:120) at com.sun.corba.se.impl.encoding.EncapsInputStream.<init>(EncapsInputStream.java:98) at org.wildfly.iiop.openjdk.csiv2.CSIV2IORToSocketInfo.readCompoundSecMechList(CSIV2IORToSocketInfo.java:146) at org.wildfly.iiop.openjdk.csiv2.CSIV2IORToSocketInfo.selectSSLTransportAddress(CSIV2IORToSocketInfo.java:117) at org.wildfly.iiop.openjdk.csiv2.CSIV2IORToSocketInfo.getSocketInfo(CSIV2IORToSocketInfo.java:99) at com.sun.corba.se.impl.transport.CorbaContactInfoListImpl.addRemoteContactInfos(CorbaContactInfoListImpl.java:189) at com.sun.corba.se.impl.transport.CorbaContactInfoListImpl.createContactInfoList(CorbaContactInfoListImpl.java:178) at com.sun.corba.se.impl.transport.CorbaContactInfoListImpl.iterator(CorbaContactInfoListImpl.java:80) - locked <0x359a> (a com.sun.corba.se.impl.transport.CorbaContactInfoListImpl) at com.sun.corba.se.impl.protocol.CorbaClientDelegateImpl.request(CorbaClientDelegateImpl.java:122) at org.omg.CORBA.portable.ObjectImpl._request(ObjectImpl.java:449) at org.jboss.as.ejb3.iiop.stub.DynamicIIOPStub.invoke(DynamicIIOPStub.java:123) at interface org.jboss.as.test.iiop.transaction.IIOPTransactionalStatefulRemote_Stub.sameTransaction(Unknown Source:-1) at org.jboss.as.test.iiop.transaction.ClientEjb.testSynchronization(ClientEjb.java:61) {noformat} > IIOP operations need SerializablePermission("enableSubclassImplementation") > --------------------------------------------------------------------------- > > Key: WFLY-5771 > URL: https://issues.jboss.org/browse/WFLY-5771 > Project: WildFly > Issue Type: Bug > Components: IIOP, Transactions > Affects Versions: 10.0.0.CR4 > Reporter: Ivo Studensky > Assignee: Ivo Studensky > > Since JDK 7u25 version {{org.omg.CORBA_2_3.portable.Output/InputStream}} classes need extra permissions if Security Manager is enabled. Because of a previous vulnerability, it now checks {{SerializablePermission("enableSubclassImplementation")}}. There is a property flag to allow subclass instantiations without the security check (jdk.corba.allowOutputStreamSubclass=true), but this system property is subject to removal in the future Java releases, according to my findings. > At the moment, our IIOP code fails (can be seen in iiop tests of WildFly testsuite) when running with SM enabled. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-5772) Upgrade Infinispan to 8.1.0.Final

by Paul Ferraro (JIRA)

Paul Ferraro created WFLY-5772: ---------------------------------- Summary: Upgrade Infinispan to 8.1.0.Final Key: WFLY-5772 URL: https://issues.jboss.org/browse/WFLY-5772 Project: WildFly Issue Type: Component Upgrade Components: Clustering Affects Versions: 10.0.0.CR4 Reporter: Paul Ferraro Assignee: Paul Ferraro -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-5771) IIOP operations need SerializablePermission("enableSubclassImplementation")

by Ivo Studensky (JIRA)

Ivo Studensky created WFLY-5771: ----------------------------------- Summary: IIOP operations need SerializablePermission("enableSubclassImplementation") Key: WFLY-5771 URL: https://issues.jboss.org/browse/WFLY-5771 Project: WildFly Issue Type: Bug Components: IIOP, Transactions Affects Versions: 10.0.0.CR4 Reporter: Ivo Studensky Assignee: Ivo Studensky Since JDK 7u25 version {{org.omg.CORBA_2_3.portable.Output/InputStream}} classes need extra permissions if Security Manager is enabled. Because of a previous vulnerability, it now checks {{SerializablePermission("enableSubclassImplementation")}}. There is a property flag to allow subclass instantiations without the security check (jdk.corba.allowOutputStreamSubclass=true), but this system property is subject to removal in the future Java releases, according to my findings. At the moment, our IIOP code fails (can be seen in iiop tests of WildFly testsuite) when running with SM enabled. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-1182) Update default domain configuration to use http-remoting

by ehsavoie Hugonnet (JIRA)

[ https://issues.jboss.org/browse/WFCORE-1182?page=com.atlassian.jira.plugi... ] ehsavoie Hugonnet updated WFCORE-1182: -------------------------------------- Fix Version/s: 3.0.0.Alpha1 > Update default domain configuration to use http-remoting > -------------------------------------------------------- > > Key: WFCORE-1182 > URL: https://issues.jboss.org/browse/WFCORE-1182 > Project: WildFly Core > Issue Type: Enhancement > Components: Domain Management > Affects Versions: 2.0.3.Final > Reporter: ehsavoie Hugonnet > Assignee: ehsavoie Hugonnet > Priority: Minor > Fix For: 3.0.0.Alpha1 > > > Our default domain configuration still use the native remote protocol on port 9999 for DC-HC communication. Update those files so that we use http-remoting on port 9990. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-1182) Update default domain configuration to use http-remoting

by ehsavoie Hugonnet (JIRA)

[ https://issues.jboss.org/browse/WFCORE-1182?page=com.atlassian.jira.plugi... ] ehsavoie Hugonnet reassigned WFCORE-1182: ----------------------------------------- Assignee: ehsavoie Hugonnet (was: Brian Stansberry) > Update default domain configuration to use http-remoting > -------------------------------------------------------- > > Key: WFCORE-1182 > URL: https://issues.jboss.org/browse/WFCORE-1182 > Project: WildFly Core > Issue Type: Enhancement > Components: Domain Management > Affects Versions: 2.0.3.Final > Reporter: ehsavoie Hugonnet > Assignee: ehsavoie Hugonnet > Priority: Minor > > Our default domain configuration still use the native remote protocol on port 9999 for DC-HC communication. Update those files so that we use http-remoting on port 9990. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-1182) Update default domain configuration to use http-remoting

by ehsavoie Hugonnet (JIRA)

ehsavoie Hugonnet created WFCORE-1182: ----------------------------------------- Summary: Update default domain configuration to use http-remoting Key: WFCORE-1182 URL: https://issues.jboss.org/browse/WFCORE-1182 Project: WildFly Core Issue Type: Enhancement Components: Domain Management Affects Versions: 2.0.3.Final Reporter: ehsavoie Hugonnet Assignee: Brian Stansberry Priority: Minor Our default domain configuration still use the native remote protocol on port 9999 for DC-HC communication. Update those files so that we use http-remoting on port 9990. -- This message was sent by Atlassian JIRA (v6.4.11#64026)

10 years, 7 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira December 2015