[
https://issues.jboss.org/browse/WFCORE-3147?page=com.atlassian.jira.plugi...
]
Martin Choma edited comment on WFCORE-3147 at 8/10/17 7:35 AM:
---------------------------------------------------------------
I can reproduce. Stacktrace is
{code}
13:18:20,685 ERROR [io.undertow.servlet] (ServerService Thread Pool -- 57) Error while
starting Framework: java.security.AccessControlException: WFSM000001: Permission check
failed (permission "("org.osgi.framework.AdminPermission"
"(id=0)" "context")" in code source
"(vfs:/content/sampleAppModified.war/WEB-INF/lib/org.eclipse.equinox.servletbridge_1.2.100.v20120209-2014.jar
at
org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:278)
at
org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175)
at
org.eclipse.osgi.framework.internal.core.Framework.checkAdminPermission(Framework.java:1287)
at
org.eclipse.osgi.framework.internal.core.AbstractBundle.getBundleContext(AbstractBundle.java:1298)
at org.eclipse.core.runtime.adaptor.EclipseStarter.startup(EclipseStarter.java:264)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.eclipse.equinox.servletbridge.FrameworkLauncher.start(FrameworkLauncher.java:410)
at org.eclipse.equinox.servletbridge.BridgeServlet.init(BridgeServlet.java:65)
at javax.servlet.GenericServlet.init(GenericServlet.java:244)
at
io.undertow.servlet.core.LifecyleInterceptorInvocation.proceed(LifecyleInterceptorInvocation.java:117)
at
org.wildfly.extension.undertow.security.RunAsLifecycleInterceptor.init(RunAsLifecycleInterceptor.java:78)
at
io.undertow.servlet.core.LifecyleInterceptorInvocation.proceed(LifecyleInterceptorInvocation.java:103)
at
io.undertow.servlet.core.ManagedServlet$DefaultInstanceStrategy.start(ManagedServlet.java:250)
at io.undertow.servlet.core.ManagedServlet.createServlet(ManagedServlet.java:133)
at io.undertow.servlet.core.DeploymentManagerImpl$2.call(DeploymentManagerImpl.java:565)
at io.undertow.servlet.core.DeploymentManagerImpl$2.call(DeploymentManagerImpl.java:536)
at
io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:42)
at
io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
at
org.wildfly.extension.undertow.security.SecurityContextThreadSetupAction.lambda$create$0(SecurityContextThreadSetupAction.java:105)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1506)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1506)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1506)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1506)
at io.undertow.servlet.core.DeploymentManagerImpl.start(DeploymentManagerImpl.java:578)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentService.startContext(UndertowDeploymentService.java:100)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentService$1.run(UndertowDeploymentService.java:81)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:748)
at org.jboss.threads.JBossThread.run(JBossThread.java:320)
{code}
However, using <permission class="java.security.AllPermission"/> makes
deployment start properly. This makes us thing problem is deployment has not properly
configured dependency on "org.osgi.framework.AdminPermission". I have tried to
add org.eclipse.osgi_3.8.0.N20120213-2000.jar explicitely into WEB-INF/lib, but this does
not help. Could be problem how OSGI application works and how are jars from app/plugins
class loaded in OSGI application.
was (Author: mchoma):
I can reproduce. Stacktrace is
{code}
13:18:20,685 ERROR [io.undertow.servlet] (ServerService Thread Pool -- 57) Error while
starting Framework: java.security.AccessControlException: WFSM000001: Permission check
failed (permission "("org.osgi.framework.AdminPermission"
"(id=0)" "context")" in code source
"(vfs:/content/sampleAppModified.war/WEB-INF/lib/org.eclipse.equinox.servletbridge_1.2.100.v20120209-2014.jar
at
org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:278)
at
org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175)
at
org.eclipse.osgi.framework.internal.core.Framework.checkAdminPermission(Framework.java:1287)
at
org.eclipse.osgi.framework.internal.core.AbstractBundle.getBundleContext(AbstractBundle.java:1298)
at org.eclipse.core.runtime.adaptor.EclipseStarter.startup(EclipseStarter.java:264)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.eclipse.equinox.servletbridge.FrameworkLauncher.start(FrameworkLauncher.java:410)
at org.eclipse.equinox.servletbridge.BridgeServlet.init(BridgeServlet.java:65)
at javax.servlet.GenericServlet.init(GenericServlet.java:244)
at
io.undertow.servlet.core.LifecyleInterceptorInvocation.proceed(LifecyleInterceptorInvocation.java:117)
at
org.wildfly.extension.undertow.security.RunAsLifecycleInterceptor.init(RunAsLifecycleInterceptor.java:78)
at
io.undertow.servlet.core.LifecyleInterceptorInvocation.proceed(LifecyleInterceptorInvocation.java:103)
at
io.undertow.servlet.core.ManagedServlet$DefaultInstanceStrategy.start(ManagedServlet.java:250)
at io.undertow.servlet.core.ManagedServlet.createServlet(ManagedServlet.java:133)
at io.undertow.servlet.core.DeploymentManagerImpl$2.call(DeploymentManagerImpl.java:565)
at io.undertow.servlet.core.DeploymentManagerImpl$2.call(DeploymentManagerImpl.java:536)
at
io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:42)
at
io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
at
org.wildfly.extension.undertow.security.SecurityContextThreadSetupAction.lambda$create$0(SecurityContextThreadSetupAction.java:105)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1506)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1506)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1506)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1506)
at io.undertow.servlet.core.DeploymentManagerImpl.start(DeploymentManagerImpl.java:578)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentService.startContext(UndertowDeploymentService.java:100)
at
org.wildfly.extension.undertow.deployment.UndertowDeploymentService$1.run(UndertowDeploymentService.java:81)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:748)
at org.jboss.threads.JBossThread.run(JBossThread.java:320)
{code}
Getting org.osgi.framework.AdminPermission check failed with security
manager
-----------------------------------------------------------------------------
Key: WFCORE-3147
URL:
https://issues.jboss.org/browse/WFCORE-3147
Project: WildFly Core
Issue Type: Bug
Components: Security
Affects Versions: 3.0.0.Beta30
Reporter: Martin Choma
Assignee: Darran Lofthouse
Priority: Trivial
Attachments: sampleApp.war, sampleAppModified.war, standalone.xml
Despite permission is granted in standalone.xml
{code}
<minimum-set>
<permission class="org.osgi.framework.AdminPermission"
name="(id=0)" actions="context"/>
</minimum-set>
{code}
During deployment there is exception
{code}
java.security.AccessControlException: WFSM000001: Permission check failed (permission
"("org.osgi.framework.AdminPermission" "(id=0)"
"context")" in code source
"(vfs:/content/myapp.war/WEB-INF/lib/org.eclipse.equinox.servletbridge_1.2.100.v20120209-2014.jar
{code}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)