[Red Hat JIRA] (ELY-2049) Add trace capability to o.w.s.m.WildFlySecurityManager findAccessDenial
by Boris Unckel (Jira)
[ https://issues.redhat.com/browse/ELY-2049?page=com.atlassian.jira.plugin.... ]
Boris Unckel updated ELY-2049:
------------------------------
Affects Version/s: 1.13.2.Final
(was: 1.13.0.CR1)
> Add trace capability to o.w.s.m.WildFlySecurityManager findAccessDenial
> -----------------------------------------------------------------------
>
> Key: ELY-2049
> URL: https://issues.redhat.com/browse/ELY-2049
> Project: WildFly Elytron
> Issue Type: Enhancement
> Components: Security Manager
> Affects Versions: 1.13.2.Final
> Reporter: Boris Unckel
> Priority: Major
>
> The current implementation is very strong for regular cases. It works fine to display missing permissions when CodeSource and/or ClassLoader are correctly set to the checked protection domain. If one of those is missing and there is no good exception handling, it is impossible to track down missing permissions.
> Example:
> [java.io.File|https://github.com/openjdk/jdk/blob/jdk-11%2B28/src/java.bas...]
> line 2048
> The idea is to provide a yielded trace log and provide the missing permission, the full protection domain and a dummy exception to have stack trace where this occurs.
> Current code:
> {code:java}
> public static ProtectionDomain findAccessDenial(final Permission permission, final ProtectionDomain... domains) {
> ProtectionDomain deniedDomain = null;
> if (domains != null) for (ProtectionDomain domain : domains) {
> if (! domain.implies(permission)) {
> final CodeSource codeSource = domain.getCodeSource();
> final ClassLoader classLoader = domain.getClassLoader();
> final Principal[] principals = domain.getPrincipals();
> if (principals == null || principals.length == 0) {
> access.accessCheckFailed(permission, codeSource, classLoader);
> } else {
> access.accessCheckFailed(permission, codeSource, classLoader, Arrays.toString(principals));
> }
> if (deniedDomain == null && ! LOG_ONLY) {
> deniedDomain = domain;
> }
> }
> }
> return deniedDomain;
> }
> {code}
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
5 years, 5 months
[Red Hat JIRA] (WFLY-14158) Override the observability layer in the wildfly feature pack
by Brian Stansberry (Jira)
Brian Stansberry created WFLY-14158:
---------------------------------------
Summary: Override the observability layer in the wildfly feature pack
Key: WFLY-14158
URL: https://issues.redhat.com/browse/WFLY-14158
Project: WildFly
Issue Type: Task
Components: Build System
Reporter: Brian Stansberry
Assignee: Brian Stansberry
Fix For: 22.0.0.Beta1
Provide a layer-spec.xml for observability in the wildfly feature pack, that will thus override what is in wildfly-ee. The meaning of observability will differ in the two as wildfly-ee will not provide the MP specs.
This task is not about changing the layer; it's just to provide a file that other work can manipulate.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
5 years, 5 months
[Red Hat JIRA] (DROOLS-5865) Folder test-classes is not excluded from kie-maven-plugin build
by Laura Cameran (Jira)
Laura Cameran created DROOLS-5865:
-------------------------------------
Summary: Folder test-classes is not excluded from kie-maven-plugin build
Key: DROOLS-5865
URL: https://issues.redhat.com/browse/DROOLS-5865
Project: Drools
Issue Type: Bug
Components: tools
Affects Versions: 7.46.0.Final
Reporter: Laura Cameran
Assignee: Mario Fusco
Maven goal kie-maven-plugin:build doesn't exclude folder "target/test-classes". As result, if we previously run for example mvn test goal, the target/test-classes folder is included during the write operation on outputDirectory.
I think this issue is related to DROOLS-4440.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
5 years, 5 months