December 2009 - jbossws-commits - Jboss List Archives

JBossWS SVN: r11257 - in stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr: jboss-6.0.0.M1 and 1 other directories.

by jbossws-commits＠lists.jboss.org

Author: jim.ma Date: 2009-12-10 03:06:18 -0500 (Thu, 10 Dec 2009) New Revision: 11257 Added: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-6.0.0.M1/ stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-6.0.0.M1/server.policy stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-6.0.1.SNAPSHOT/ stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-6.0.1.SNAPSHOT/server.policy Log: [JBWS-2692]:added the policy files for AS 6.x Added: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-6.0.0.M1/server.policy =================================================================== --- stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-6.0.0.M1/server.policy (rev 0) +++ stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-6.0.0.M1/server.policy 2009-12-10 08:06:18 UTC (rev 11257) @@ -0,0 +1,346 @@ +// The Java2 security policy for the securitymgr tests +// Install with -Djava.security.policy==server.policy +// and -Djboss.home.dir=path_to_jboss_distribution + +// *************************************** +// Trusted core Java code +//*************************************** +grant codeBase "file:${java.home}/lib/ext/-" { + permission java.security.AllPermission; +}; +grant codeBase "file:${java.home}/lib/*" { + permission java.security.AllPermission; +}; +// For java.home pointing to the JDK jre directory +grant codeBase "file:${java.home}/../lib/*" { + permission java.security.AllPermission; +}; + + + + +//******************************************** +// Trusted core JBoss code (REAL URL Version) +//******************************************** +grant codeBase "file:${jboss.home.dir}/bin/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/common/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/server/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deployers/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/work/-" { + permission java.security.AllPermission; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/common/lib/log4j.jar!/" { + permission java.lang.RuntimePermission "getClassLoader"; +}; +grant codeBase "jar:file:${jboss.server.home.dir}/common/lib/servlet-api.jar!/" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +//******************************************** +// Trusted core JBoss code (VFS URL Version) +//******************************************** +grant codeBase "vfszip:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.home.dir}/common/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.home.dir}/server/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deployers/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/work/-" { + permission java.security.AllPermission; +}; + + +//******************************************************* +// Trusted Specific JBoss Code (REAL URL Version) +//******************************************************* +grant codeBase "file:${jboss.server.home.dir}/conf/bindingservice.beans/jboss-bindingservice.jar/-"{ + permission java.io.FilePermission "${jboss.home.dir}/deploy/jbossweb.sar/server.xml", "read"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jmx-remoting.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission java.net.SocketPermission "*", "accept,listen,resolve"; + permission java.lang.RuntimePermission "getClassLoader"; + permission java.util.logging.LoggingPermission "control"; +}; + + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/jsf-libs/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar/-" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/conf/bindingservice.beans/jboss-bindingservice.jar!/"{ + permission java.util.PropertyPermission "*", "write"; + permission java.io.FilePermission "${jboss.server.home.dir}/deploy/jbossweb.sar/server.xml", "read"; + permission java.io.FilePermission "${jboss.server.home.dir}/tmp/-", "write,delete"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar!/jboss-local-jdbc.jar" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/management/console-mgr.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","*"; + permission java.io.FilePermission "<<ALL FILES>>", "read"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jms-ra.rar!/jms-ra.jar" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jms-ra.rar/jms-ra.jar!/" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/quartz-ra.rar!/quartz-ra.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/quartz-ra.rar/quartz-ra.jar!/" { + permission java.security.AllPermission; +}; + + + +//******************************************************* +// Trusted Specific JBoss Code (VFS URL Version) +//******************************************************* +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jmx-remoting.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission java.net.SocketPermission "*", "accept,listen,resolve"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jboss-web-service.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jbossweb.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/jbossweb.sar/jbossweb.jar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jsf-libs/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jasper-jdt.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jstl.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar/-" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/management/console-mgr.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","*"; + permission java.io.FilePermission "<<ALL FILES>>", "read"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jms-ra.rar/jms-ra.jar" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/quartz-ra.rar/quartz-ra.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfsmemory://*" { + permission java.security.AllPermission; +}; + +//**************************************************************** +// jbossws cxf permission +//**************************************************************** +//for juddi deployment +grant codeBase "file:${jboss.server.home.dir}/deploy/juddi-service.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission org.jboss.naming.JndiPermission "JAXR", "rebind"; +}; +//for admin console- TODO:Review it +grant codeBase "file:${jboss.server.home.dir}/deployers/jbossweb.deployer/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/admin-console.war/-" { + permission java.security.AllPermission; +}; + +//**************************************************************** +// Default block of permissions +// Minimal permissions are allowed to everyone else +//**************************************************************** +grant { + permission java.io.FilePermission "${jboss.server.home.dir}/tmp/-", "read"; + permission java.io.FilePermission "${jboss.home.dir}/server/lib/quartz.jar/org/quartz/quartz.properties", "read"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "quartz.properties", "read"; + permission java.util.PropertyPermission "*", "read"; + permission java.lang.RuntimePermission "queuePrintJob"; + permission java.net.SocketPermission "*", "connect"; + permission java.security.SecurityPermission "getPolicy"; + permission java.lang.RuntimePermission "accessClassInPackage.*"; + permission java.lang.RuntimePermission "getProtectionDomain"; + permission java.lang.RuntimePermission "org.jboss.security.SecurityAssociation.getSubject"; + permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.getSubjectInfo"; + + permission javax.management.MBeanServerPermission "findMBeanServer"; + permission javax.management.MBeanPermission "org.jboss.mx.modelmbean.XMBean#*[JMImplementation:type=MBeanRegistry]", "*"; + permission javax.management.MBeanPermission "org.jboss.security.plugins.AuthorizationManagerService#*[jboss.security:service=AuthorizationManager]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.jms.server.jbosssx.JBossASSecurityMetadataStore#*[jboss.messaging:service=SecurityStore]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.security.auth.login.XMLLoginConfig#*[jboss.security:service=XMLLoginConfig]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.security.plugins.JaasSecurityManagerService#*[jboss.security:service=JaasSecurityManager]", "invoke"; + permission javax.management.MBeanPermission "*", "getMBeanInfo"; + permission javax.management.MBeanPermission "*", "getAttribute"; + + permission javax.security.auth.AuthPermission "createLoginContext.*"; + permission javax.security.auth.AuthPermission "getLoginConfiguration"; + //admin-console + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","rebind,createSubcontext"; + permission java.util.logging.LoggingPermission "control"; + permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "addNotificationListener"; + + + // for org.jboss.test.ws.jaxws.cxf.webserviceref.WebServiceRefServletTestCase.testServletClient() + permission java.io.FilePermission "<<ALL FILES>>", "read"; + + //CXF annotation vistor uses reflection to process annotation + permission java.lang.RuntimePermission "accessDeclaredMembers"; + permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; + + // for frameworktest org.jboss.test.ws.jaxws.smoke.tools.WSRunClientTestCase.test() + permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.getData"; + + //add write permission to frameworktest : org.jboss.test.ws.jaxws.jbws2000.JBWS2000TestCase + permission java.io.FilePermission "/tmp/-", "write,delete"; + //frameworktest : org.jboss.test.ws.jaxws.jbws1822.JBWS1822TestCase + permission java.lang.RuntimePermission "createClassLoader"; + //Allow client to regiester MBean : org.jboss.test.ws.management.recording.CustomRecordProcessorTestCase.testAddCustomProcessor() + permission javax.management.MBeanTrustPermission "register"; +}; Added: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-6.0.1.SNAPSHOT/server.policy =================================================================== --- stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-6.0.1.SNAPSHOT/server.policy (rev 0) +++ stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-6.0.1.SNAPSHOT/server.policy 2009-12-10 08:06:18 UTC (rev 11257) @@ -0,0 +1,354 @@ +// The Java2 security policy for the securitymgr tests +// Install with -Djava.security.policy==server.policy +// and -Djboss.home.dir=path_to_jboss_distribution + +// *************************************** +// Trusted core Java code +//*************************************** +grant codeBase "file:${java.home}/lib/ext/-" { + permission java.security.AllPermission; +}; +grant codeBase "file:${java.home}/lib/*" { + permission java.security.AllPermission; +}; +// For java.home pointing to the JDK jre directory +grant codeBase "file:${java.home}/../lib/*" { + permission java.security.AllPermission; +}; + + + + +//******************************************** +// Trusted core JBoss code (REAL URL Version) +//******************************************** +grant codeBase "file:${jboss.home.dir}/bin/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/common/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/server/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deployers/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/work/-" { + permission java.security.AllPermission; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/common/lib/log4j.jar!/" { + permission java.lang.RuntimePermission "getClassLoader"; +}; +grant codeBase "jar:file:${jboss.server.home.dir}/common/lib/servlet-api.jar!/" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +//******************************************** +// Trusted core JBoss code (VFS URL Version) +//******************************************** +grant codeBase "vfszip:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.home.dir}/common/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.home.dir}/server/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deployers/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/work/-" { + permission java.security.AllPermission; +}; + + +//******************************************************* +// Trusted Specific JBoss Code (REAL URL Version) +//******************************************************* +grant codeBase "file:${jboss.server.home.dir}/conf/bindingservice.beans/jboss-bindingservice.jar/-"{ + permission java.io.FilePermission "${jboss.home.dir}/deploy/jbossweb.sar/server.xml", "read"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jmx-remoting.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission java.net.SocketPermission "*", "accept,listen,resolve"; + permission java.lang.RuntimePermission "getClassLoader"; + permission java.util.logging.LoggingPermission "control"; +}; + + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/jsf-libs/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar/-" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/conf/bindingservice.beans/jboss-service-binding-core.jar!/"{ + permission java.util.PropertyPermission "*", "write"; + permission java.io.FilePermission "${jboss.server.home.dir}/deploy/jbossweb.sar/server.xml", "read"; + permission java.io.FilePermission "${jboss.server.home.dir}/tmp/-", "write,delete"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/conf/bindingservice.beans/jboss-service-binding-mgmt.jar!/"{ + permission java.util.PropertyPermission "*", "write"; + permission java.io.FilePermission "${jboss.server.home.dir}/deploy/jbossweb.sar/server.xml", "read"; + permission java.io.FilePermission "${jboss.server.home.dir}/tmp/-", "write,delete"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar!/jboss-local-jdbc.jar" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/management/console-mgr.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","*"; + permission java.io.FilePermission "<<ALL FILES>>", "read"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jms-ra.rar!/jms-ra.jar" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jms-ra.rar/jms-ra.jar!/" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/quartz-ra.rar!/quartz-ra.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/quartz-ra.rar/quartz-ra.jar!/" { + permission java.security.AllPermission; +}; + + + +//******************************************************* +// Trusted Specific JBoss Code (VFS URL Version) +//******************************************************* +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jmx-remoting.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission java.net.SocketPermission "*", "accept,listen,resolve"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jboss-web-service.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jbossweb.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/jbossweb.sar/jbossweb.jar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jsf-libs/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jasper-jdt.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jstl.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar/-" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/management/console-mgr.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","*"; + permission java.io.FilePermission "<<ALL FILES>>", "read"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jms-ra.rar/jms-ra.jar" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/quartz-ra.rar/quartz-ra.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfsmemory://*" { + permission java.security.AllPermission; +}; + +//**************************************************************** +// jbossws cxf permission +//**************************************************************** +//for juddi deployment +grant codeBase "file:${jboss.server.home.dir}/deploy/juddi-service.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission org.jboss.naming.JndiPermission "JAXR", "rebind"; +}; +//for admin console- TODO:Review it +grant codeBase "file:${jboss.server.home.dir}/deployers/jbossweb.deployer/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/admin-console.war/-" { + permission java.security.AllPermission; +}; + +//**************************************************************** +// Default block of permissions +// Minimal permissions are allowed to everyone else +//**************************************************************** +grant { + permission java.io.FilePermission "${jboss.server.home.dir}/tmp/-", "read"; + permission java.io.FilePermission "${jboss.home.dir}/server/lib/quartz.jar/org/quartz/quartz.properties", "read"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "quartz.properties", "read"; + permission java.util.PropertyPermission "*", "read"; + permission java.lang.RuntimePermission "queuePrintJob"; + permission java.net.SocketPermission "*", "connect"; + permission java.security.SecurityPermission "getPolicy"; + permission java.lang.RuntimePermission "accessClassInPackage.*"; + permission java.lang.RuntimePermission "getProtectionDomain"; + permission java.lang.RuntimePermission "org.jboss.security.SecurityAssociation.getSubject"; + permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.getSubjectInfo"; + + permission javax.management.MBeanServerPermission "findMBeanServer"; + permission javax.management.MBeanPermission "org.jboss.mx.modelmbean.XMBean#*[JMImplementation:type=MBeanRegistry]", "*"; + permission javax.management.MBeanPermission "org.jboss.security.plugins.AuthorizationManagerService#*[jboss.security:service=AuthorizationManager]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.jms.server.jbosssx.JBossASSecurityMetadataStore#*[jboss.messaging:service=SecurityStore]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.security.auth.login.XMLLoginConfig#*[jboss.security:service=XMLLoginConfig]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.security.plugins.JaasSecurityManagerService#*[jboss.security:service=JaasSecurityManager]", "invoke"; + permission javax.management.MBeanPermission "*", "getMBeanInfo"; + permission javax.management.MBeanPermission "*", "getAttribute"; + + permission javax.security.auth.AuthPermission "createLoginContext.*"; + permission javax.security.auth.AuthPermission "getLoginConfiguration"; + + //admin-console + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","rebind,createSubcontext"; + permission java.util.logging.LoggingPermission "control"; + permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "addNotificationListener"; + + + // for org.jboss.test.ws.jaxws.cxf.webserviceref.WebServiceRefServletTestCase.testServletClient() + permission java.io.FilePermission "<<ALL FILES>>", "read"; + + //CXF annotation vistor uses reflection to process annotation + permission java.lang.RuntimePermission "accessDeclaredMembers"; + permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; + + // for frameworktest org.jboss.test.ws.jaxws.smoke.tools.WSRunClientTestCase.test() + permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.getData"; + + //add write permission to frameworktest : org.jboss.test.ws.jaxws.jbws2000.JBWS2000TestCase + permission java.io.FilePermission "/tmp/-", "write,delete"; + //frameworktest : org.jboss.test.ws.jaxws.jbws1822.JBWS1822TestCase + permission java.lang.RuntimePermission "createClassLoader"; + //Allow client to regiester MBean : org.jboss.test.ws.management.recording.CustomRecordProcessorTestCase.testAddCustomProcessor() + permission javax.management.MBeanTrustPermission "register"; + +};

14 years, 5 months

1
0
0 / 0

JBossWS SVN: r11256 - in framework/trunk: hudson/hudson-home and 10 other directories.

by jbossws-commits＠lists.jboss.org

Author: richard.opalka(a)jboss.com Date: 2009-12-10 02:58:58 -0500 (Thu, 10 Dec 2009) New Revision: 11256 Removed: framework/trunk/hudson/hudson-home/jobs/AS-5.0.0/ framework/trunk/hudson/hudson-home/jobs/AS-TESTS-AS-5.0.0/ framework/trunk/hudson/hudson-home/jobs/CXF-BINDIST-AS-5.0.0-SUN-JDK-6/ framework/trunk/hudson/hudson-home/jobs/CXF-CORE-AS-5.0.0-SUN-JDK-6/ framework/trunk/hudson/hudson-home/jobs/CXF-SRCDIST-AS-5.0.0-SUN-JDK-6/ framework/trunk/hudson/hudson-home/jobs/METRO-BINDIST-AS-5.0.0-SUN-JDK-6/ framework/trunk/hudson/hudson-home/jobs/METRO-CORE-AS-5.0.0-SUN-JDK-6/ framework/trunk/hudson/hudson-home/jobs/METRO-SRCDIST-AS-5.0.0-SUN-JDK-6/ framework/trunk/hudson/hudson-home/jobs/NATIVE-BINDIST-AS-5.0.0-SUN-JDK-6/ framework/trunk/hudson/hudson-home/jobs/NATIVE-CORE-AS-5.0.0-SUN-JDK-6/ framework/trunk/hudson/hudson-home/jobs/NATIVE-SRCDIST-AS-5.0.0-SUN-JDK-6/ Modified: framework/trunk/hudson/ant.properties.example framework/trunk/hudson/hudson-home/config.xml framework/trunk/hudson/hudson-home/jobs/AS-ALL/config.xml framework/trunk/hudson/hudson-home/jobs/AS-TESTS-ALL/config.xml framework/trunk/hudson/hudson-home/jobs/CXF-ALL/config.xml framework/trunk/hudson/hudson-home/jobs/CXF-LIGHT/config.xml framework/trunk/hudson/hudson-home/jobs/METRO-ALL/config.xml framework/trunk/hudson/hudson-home/jobs/METRO-LIGHT/config.xml framework/trunk/hudson/hudson-home/jobs/NATIVE-ALL/config.xml framework/trunk/hudson/hudson-home/jobs/NATIVE-LIGHT/config.xml framework/trunk/testsuite/test/ant-import/build-testsuite.xml Log: removing AS 5.0.0 support Modified: framework/trunk/hudson/ant.properties.example =================================================================== --- framework/trunk/hudson/ant.properties.example 2009-12-10 07:47:39 UTC (rev 11255) +++ framework/trunk/hudson/ant.properties.example 2009-12-10 07:58:58 UTC (rev 11256) @@ -25,10 +25,6 @@ hudson.metro.url=http://anonsvn.jboss.org/repos/jbossws/stack/metro/trunk hudson.cxf.url=http://anonsvn.jboss.org/repos/jbossws/stack/cxf/trunk -hudson.jboss500.url=http://anonsvn.jboss.org/repos/jbossas/tags/JBoss_5_0_0_GA -hudson.jboss500.build=jboss-5.0.0.GA -hudson.jboss500.rev=HEAD - hudson.jboss501.url=http://anonsvn.jboss.org/repos/jbossas/tags/JBoss_5_0... hudson.jboss501.build=jboss-5.0.1.GA hudson.jboss501.rev=HEAD Modified: framework/trunk/hudson/hudson-home/config.xml =================================================================== --- framework/trunk/hudson/hudson-home/config.xml 2009-12-10 07:47:39 UTC (rev 11255) +++ framework/trunk/hudson/hudson-home/config.xml 2009-12-10 07:58:58 UTC (rev 11256) @@ -13,7 +13,6 @@ <tr><th align=left>Stack-Metro:</th><td>@hudson.metro.url@</td></tr> <tr><th align=left>Stack-CXF:</th><td>@hudson.cxf.url@</td></tr> <tr><td colspan=2></td></tr> - <tr><th align=left>@hudson.jboss500.build@</th><td>-r(a)hudson.jboss500.rev@ @hudson.jboss500.url@</td></tr> <tr><th align=left>@hudson.jboss501.build@</th><td>-r(a)hudson.jboss501.rev@ @hudson.jboss501.url@</td></tr> <tr><th align=left>@hudson.jboss510.build@</th><td>-r(a)hudson.jboss510.rev@ @hudson.jboss510.url@</td></tr> <tr><th align=left>@hudson.jboss600.build@</th><td>-r(a)hudson.jboss600.rev@ @hudson.jboss600.url@</td></tr> @@ -33,7 +32,6 @@ <jobNames class="tree-set"> <no-comparator/> <string>AS-ALL</string> - <string>AS-5.0.0</string> <string>AS-5.0.1</string> <string>AS-5.1.0</string> <string>AS-6.0.0</string> @@ -53,7 +51,6 @@ <jobNames class="tree-set"> <no-comparator/> <string>AS-TESTS-ALL</string> - <string>AS-TESTS-AS-5.0.0</string> <string>AS-TESTS-AS-5.0.1</string> <string>AS-TESTS-AS-5.1.0</string> <string>AS-TESTS-AS-6.0.0</string> @@ -76,17 +73,14 @@ <no-comparator/> <string>NATIVE-ALL</string> <string>NATIVE-LIGHT</string> - <string>NATIVE-CORE-AS-5.0.0-SUN-JDK-6</string> <string>NATIVE-CORE-AS-5.0.1-SUN-JDK-6</string> <string>NATIVE-CORE-AS-5.1.0-SUN-JDK-6</string> <string>NATIVE-CORE-AS-6.0.0-SUN-JDK-6</string> <string>NATIVE-CORE-AS-6.0.1-SUN-JDK-6</string> - <string>NATIVE-BINDIST-AS-5.0.0-SUN-JDK-6</string> <string>NATIVE-BINDIST-AS-5.0.1-SUN-JDK-6</string> <string>NATIVE-BINDIST-AS-5.1.0-SUN-JDK-6</string> <string>NATIVE-BINDIST-AS-6.0.0-SUN-JDK-6</string> <string>NATIVE-BINDIST-AS-6.0.1-SUN-JDK-6</string> - <string>NATIVE-SRCDIST-AS-5.0.0-SUN-JDK-6</string> <string>NATIVE-SRCDIST-AS-5.0.1-SUN-JDK-6</string> <string>NATIVE-SRCDIST-AS-5.1.0-SUN-JDK-6</string> <string>NATIVE-SRCDIST-AS-6.0.0-SUN-JDK-6</string> @@ -109,17 +103,14 @@ <no-comparator/> <string>METRO-ALL</string> <string>METRO-LIGHT</string> - <string>METRO-CORE-AS-5.0.0-SUN-JDK-6</string> <string>METRO-CORE-AS-5.0.1-SUN-JDK-6</string> <string>METRO-CORE-AS-5.1.0-SUN-JDK-6</string> <string>METRO-CORE-AS-6.0.0-SUN-JDK-6</string> <string>METRO-CORE-AS-6.0.1-SUN-JDK-6</string> - <string>METRO-BINDIST-AS-5.0.0-SUN-JDK-6</string> <string>METRO-BINDIST-AS-5.0.1-SUN-JDK-6</string> <string>METRO-BINDIST-AS-5.1.0-SUN-JDK-6</string> <string>METRO-BINDIST-AS-6.0.0-SUN-JDK-6</string> <string>METRO-BINDIST-AS-6.0.1-SUN-JDK-6</string> - <string>METRO-SRCDIST-AS-5.0.0-SUN-JDK-6</string> <string>METRO-SRCDIST-AS-5.0.1-SUN-JDK-6</string> <string>METRO-SRCDIST-AS-5.1.0-SUN-JDK-6</string> <string>METRO-SRCDIST-AS-6.0.0-SUN-JDK-6</string> @@ -142,17 +133,14 @@ <no-comparator/> <string>CXF-ALL</string> <string>CXF-LIGHT</string> - <string>CXF-CORE-AS-5.0.0-SUN-JDK-6</string> <string>CXF-CORE-AS-5.0.1-SUN-JDK-6</string> <string>CXF-CORE-AS-5.1.0-SUN-JDK-6</string> <string>CXF-CORE-AS-6.0.0-SUN-JDK-6</string> <string>CXF-CORE-AS-6.0.1-SUN-JDK-6</string> - <string>CXF-BINDIST-AS-5.0.0-SUN-JDK-6</string> <string>CXF-BINDIST-AS-5.0.1-SUN-JDK-6</string> <string>CXF-BINDIST-AS-5.1.0-SUN-JDK-6</string> <string>CXF-BINDIST-AS-6.0.0-SUN-JDK-6</string> <string>CXF-BINDIST-AS-6.0.1-SUN-JDK-6</string> - <string>CXF-SRCDIST-AS-5.0.0-SUN-JDK-6</string> <string>CXF-SRCDIST-AS-5.0.1-SUN-JDK-6</string> <string>CXF-SRCDIST-AS-5.1.0-SUN-JDK-6</string> <string>CXF-SRCDIST-AS-6.0.0-SUN-JDK-6</string> @@ -174,34 +162,28 @@ <jobNames class="tree-set"> <no-comparator/> <string>METRO-LIGHT</string> - <string>METRO-CORE-AS-5.0.0-SUN-JDK-6</string> <string>METRO-CORE-AS-5.0.1-SUN-JDK-6</string> <string>METRO-CORE-AS-5.1.0-SUN-JDK-6</string> <string>METRO-CORE-AS-6.0.0-SUN-JDK-6</string> <string>METRO-CORE-AS-6.0.1-SUN-JDK-6</string> - <string>METRO-BINDIST-AS-5.0.0-SUN-JDK-6</string> <string>METRO-BINDIST-AS-5.0.1-SUN-JDK-6</string> <string>METRO-BINDIST-AS-5.1.0-SUN-JDK-6</string> <string>METRO-BINDIST-AS-6.0.0-SUN-JDK-6</string> <string>METRO-BINDIST-AS-6.0.1-SUN-JDK-6</string> <string>CXF-LIGHT</string> - <string>CXF-CORE-AS-5.0.0-SUN-JDK-6</string> <string>CXF-CORE-AS-5.0.1-SUN-JDK-6</string> <string>CXF-CORE-AS-5.1.0-SUN-JDK-6</string> <string>CXF-CORE-AS-6.0.0-SUN-JDK-6</string> <string>CXF-CORE-AS-6.0.1-SUN-JDK-6</string> - <string>CXF-BINDIST-AS-5.0.0-SUN-JDK-6</string> <string>CXF-BINDIST-AS-5.0.1-SUN-JDK-6</string> <string>CXF-BINDIST-AS-5.1.0-SUN-JDK-6</string> <string>CXF-BINDIST-AS-6.0.0-SUN-JDK-6</string> <string>CXF-BINDIST-AS-6.0.1-SUN-JDK-6</string> <string>NATIVE-LIGHT</string> - <string>NATIVE-CORE-AS-5.0.0-SUN-JDK-6</string> <string>NATIVE-CORE-AS-5.0.1-SUN-JDK-6</string> <string>NATIVE-CORE-AS-5.1.0-SUN-JDK-6</string> <string>NATIVE-CORE-AS-6.0.0-SUN-JDK-6</string> <string>NATIVE-CORE-AS-6.0.1-SUN-JDK-6</string> - <string>NATIVE-BINDIST-AS-5.0.0-SUN-JDK-6</string> <string>NATIVE-BINDIST-AS-5.0.1-SUN-JDK-6</string> <string>NATIVE-BINDIST-AS-5.1.0-SUN-JDK-6</string> <string>NATIVE-BINDIST-AS-6.0.0-SUN-JDK-6</string> Modified: framework/trunk/hudson/hudson-home/jobs/AS-ALL/config.xml =================================================================== --- framework/trunk/hudson/hudson-home/jobs/AS-ALL/config.xml 2009-12-10 07:47:39 UTC (rev 11255) +++ framework/trunk/hudson/hudson-home/jobs/AS-ALL/config.xml 2009-12-10 07:58:58 UTC (rev 11256) @@ -3,7 +3,7 @@ <builders class="vector"/> <publishers class="vector"> <hudson.tasks.BuildTrigger> - <childProjects>AS-5.0.0, AS-5.0.1, AS-5.1.0, AS-6.0.0, AS-6.0.1</childProjects> + <childProjects>AS-5.0.1, AS-5.1.0, AS-6.0.0, AS-6.0.1</childProjects> </hudson.tasks.BuildTrigger> </publishers> <buildWrappers class="vector"/> Modified: framework/trunk/hudson/hudson-home/jobs/AS-TESTS-ALL/config.xml =================================================================== --- framework/trunk/hudson/hudson-home/jobs/AS-TESTS-ALL/config.xml 2009-12-10 07:47:39 UTC (rev 11255) +++ framework/trunk/hudson/hudson-home/jobs/AS-TESTS-ALL/config.xml 2009-12-10 07:58:58 UTC (rev 11256) @@ -3,7 +3,7 @@ <builders class="vector"/> <publishers class="vector"> <hudson.tasks.BuildTrigger> - <childProjects>AS-TESTS-AS-5.0.0, AS-TESTS-AS-5.0.1, AS-TESTS-AS-5.1.0, AS-TESTS-AS-6.0.0, AS-TESTS-AS-6.0.1</childProjects> + <childProjects>AS-TESTS-AS-5.0.1, AS-TESTS-AS-5.1.0, AS-TESTS-AS-6.0.0, AS-TESTS-AS-6.0.1</childProjects> </hudson.tasks.BuildTrigger> </publishers> <buildWrappers class="vector"/> Modified: framework/trunk/hudson/hudson-home/jobs/CXF-ALL/config.xml =================================================================== --- framework/trunk/hudson/hudson-home/jobs/CXF-ALL/config.xml 2009-12-10 07:47:39 UTC (rev 11255) +++ framework/trunk/hudson/hudson-home/jobs/CXF-ALL/config.xml 2009-12-10 07:58:58 UTC (rev 11256) @@ -4,19 +4,16 @@ <publishers class="vector"> <hudson.tasks.BuildTrigger> <childProjects> - CXF-CORE-AS-5.0.0-SUN-JDK-6 -, CXF-CORE-AS-5.0.1-SUN-JDK-6 + CXF-CORE-AS-5.0.1-SUN-JDK-6 , CXF-CORE-AS-5.1.0-SUN-JDK-6 , CXF-CORE-AS-6.0.0-SUN-JDK-6 , CXF-CORE-AS-6.0.1-SUN-JDK-6 -, CXF-BINDIST-AS-5.0.0-SUN-JDK-6 , CXF-BINDIST-AS-5.0.1-SUN-JDK-6 , CXF-BINDIST-AS-5.1.0-SUN-JDK-6 , CXF-BINDIST-AS-6.0.0-SUN-JDK-6 , CXF-BINDIST-AS-6.0.1-SUN-JDK-6 -, CXF-SRCDIST-AS-5.0.0-SUN-JDK-6 , CXF-SRCDIST-AS-5.0.1-SUN-JDK-6 , CXF-SRCDIST-AS-5.1.0-SUN-JDK-6 , CXF-SRCDIST-AS-6.0.0-SUN-JDK-6 Modified: framework/trunk/hudson/hudson-home/jobs/CXF-LIGHT/config.xml =================================================================== --- framework/trunk/hudson/hudson-home/jobs/CXF-LIGHT/config.xml 2009-12-10 07:47:39 UTC (rev 11255) +++ framework/trunk/hudson/hudson-home/jobs/CXF-LIGHT/config.xml 2009-12-10 07:58:58 UTC (rev 11256) @@ -4,13 +4,11 @@ <publishers class="vector"> <hudson.tasks.BuildTrigger> <childProjects> - CXF-CORE-AS-5.0.0-SUN-JDK-6 -, CXF-CORE-AS-5.0.1-SUN-JDK-6 + CXF-CORE-AS-5.0.1-SUN-JDK-6 , CXF-CORE-AS-5.1.0-SUN-JDK-6 , CXF-CORE-AS-6.0.0-SUN-JDK-6 , CXF-CORE-AS-6.0.1-SUN-JDK-6 -, CXF-BINDIST-AS-5.0.0-SUN-JDK-6 , CXF-BINDIST-AS-5.0.1-SUN-JDK-6 , CXF-BINDIST-AS-5.1.0-SUN-JDK-6 , CXF-BINDIST-AS-6.0.0-SUN-JDK-6 Modified: framework/trunk/hudson/hudson-home/jobs/METRO-ALL/config.xml =================================================================== --- framework/trunk/hudson/hudson-home/jobs/METRO-ALL/config.xml 2009-12-10 07:47:39 UTC (rev 11255) +++ framework/trunk/hudson/hudson-home/jobs/METRO-ALL/config.xml 2009-12-10 07:58:58 UTC (rev 11256) @@ -4,19 +4,16 @@ <publishers class="vector"> <hudson.tasks.BuildTrigger> <childProjects> - METRO-CORE-AS-5.0.0-SUN-JDK-6 -, METRO-CORE-AS-5.0.1-SUN-JDK-6 + METRO-CORE-AS-5.0.1-SUN-JDK-6 , METRO-CORE-AS-5.1.0-SUN-JDK-6 , METRO-CORE-AS-6.0.0-SUN-JDK-6 , METRO-CORE-AS-6.0.1-SUN-JDK-6 -, METRO-BINDIST-AS-5.0.0-SUN-JDK-6 , METRO-BINDIST-AS-5.0.1-SUN-JDK-6 , METRO-BINDIST-AS-5.1.0-SUN-JDK-6 , METRO-BINDIST-AS-6.0.0-SUN-JDK-6 , METRO-BINDIST-AS-6.0.1-SUN-JDK-6 -, METRO-SRCDIST-AS-5.0.0-SUN-JDK-6 , METRO-SRCDIST-AS-5.0.1-SUN-JDK-6 , METRO-SRCDIST-AS-5.1.0-SUN-JDK-6 , METRO-SRCDIST-AS-6.0.0-SUN-JDK-6 Modified: framework/trunk/hudson/hudson-home/jobs/METRO-LIGHT/config.xml =================================================================== --- framework/trunk/hudson/hudson-home/jobs/METRO-LIGHT/config.xml 2009-12-10 07:47:39 UTC (rev 11255) +++ framework/trunk/hudson/hudson-home/jobs/METRO-LIGHT/config.xml 2009-12-10 07:58:58 UTC (rev 11256) @@ -4,13 +4,11 @@ <publishers class="vector"> <hudson.tasks.BuildTrigger> <childProjects> - METRO-CORE-AS-5.0.0-SUN-JDK-6 -, METRO-CORE-AS-5.0.1-SUN-JDK-6 + METRO-CORE-AS-5.0.1-SUN-JDK-6 , METRO-CORE-AS-5.1.0-SUN-JDK-6 , METRO-CORE-AS-6.0.0-SUN-JDK-6 , METRO-CORE-AS-6.0.1-SUN-JDK-6 -, METRO-BINDIST-AS-5.0.0-SUN-JDK-6 , METRO-BINDIST-AS-5.0.1-SUN-JDK-6 , METRO-BINDIST-AS-5.1.0-SUN-JDK-6 , METRO-BINDIST-AS-6.0.0-SUN-JDK-6 Modified: framework/trunk/hudson/hudson-home/jobs/NATIVE-ALL/config.xml =================================================================== --- framework/trunk/hudson/hudson-home/jobs/NATIVE-ALL/config.xml 2009-12-10 07:47:39 UTC (rev 11255) +++ framework/trunk/hudson/hudson-home/jobs/NATIVE-ALL/config.xml 2009-12-10 07:58:58 UTC (rev 11256) @@ -4,19 +4,16 @@ <publishers class="vector"> <hudson.tasks.BuildTrigger> <childProjects> - NATIVE-CORE-AS-5.0.0-SUN-JDK-6 -, NATIVE-CORE-AS-5.0.1-SUN-JDK-6 + NATIVE-CORE-AS-5.0.1-SUN-JDK-6 , NATIVE-CORE-AS-5.1.0-SUN-JDK-6 , NATIVE-CORE-AS-6.0.0-SUN-JDK-6 , NATIVE-CORE-AS-6.0.1-SUN-JDK-6 -, NATIVE-BINDIST-AS-5.0.0-SUN-JDK-6 , NATIVE-BINDIST-AS-5.0.1-SUN-JDK-6 , NATIVE-BINDIST-AS-5.1.0-SUN-JDK-6 , NATIVE-BINDIST-AS-6.0.0-SUN-JDK-6 , NATIVE-BINDIST-AS-6.0.1-SUN-JDK-6 -, NATIVE-SRCDIST-AS-5.0.0-SUN-JDK-6 , NATIVE-SRCDIST-AS-5.0.1-SUN-JDK-6 , NATIVE-SRCDIST-AS-5.1.0-SUN-JDK-6 , NATIVE-SRCDIST-AS-6.0.0-SUN-JDK-6 Modified: framework/trunk/hudson/hudson-home/jobs/NATIVE-LIGHT/config.xml =================================================================== --- framework/trunk/hudson/hudson-home/jobs/NATIVE-LIGHT/config.xml 2009-12-10 07:47:39 UTC (rev 11255) +++ framework/trunk/hudson/hudson-home/jobs/NATIVE-LIGHT/config.xml 2009-12-10 07:58:58 UTC (rev 11256) @@ -4,13 +4,11 @@ <publishers class="vector"> <hudson.tasks.BuildTrigger> <childProjects> - NATIVE-CORE-AS-5.0.0-SUN-JDK-6 -, NATIVE-CORE-AS-5.0.1-SUN-JDK-6 + NATIVE-CORE-AS-5.0.1-SUN-JDK-6 , NATIVE-CORE-AS-5.1.0-SUN-JDK-6 , NATIVE-CORE-AS-6.0.0-SUN-JDK-6 , NATIVE-CORE-AS-6.0.1-SUN-JDK-6 -, NATIVE-BINDIST-AS-5.0.0-SUN-JDK-6 , NATIVE-BINDIST-AS-5.0.1-SUN-JDK-6 , NATIVE-BINDIST-AS-5.1.0-SUN-JDK-6 , NATIVE-BINDIST-AS-6.0.0-SUN-JDK-6 Modified: framework/trunk/testsuite/test/ant-import/build-testsuite.xml =================================================================== --- framework/trunk/testsuite/test/ant-import/build-testsuite.xml 2009-12-10 07:47:39 UTC (rev 11255) +++ framework/trunk/testsuite/test/ant-import/build-testsuite.xml 2009-12-10 07:58:58 UTC (rev 11256) @@ -15,9 +15,6 @@ <target name="tests-prepare" depends="prepare">  - <condition property="jboss.home" value="${jboss500.home}"> - <equals arg1="${jbossws.integration.target}" arg2="jboss500"/> - </condition> <condition property="jboss.home" value="${jboss501.home}"> <equals arg1="${jbossws.integration.target}" arg2="jboss501"/> </condition>

14 years, 5 months

1
0
0 / 0

JBossWS SVN: r11255 - framework/trunk/testsuite/test/ant-import.

by jbossws-commits＠lists.jboss.org

Author: richard.opalka(a)jboss.com Date: 2009-12-10 02:47:39 -0500 (Thu, 10 Dec 2009) New Revision: 11255 Modified: framework/trunk/testsuite/test/ant-import/build-testsuite.xml Log: fixing hudson failure against AS 6.0.0 Modified: framework/trunk/testsuite/test/ant-import/build-testsuite.xml =================================================================== --- framework/trunk/testsuite/test/ant-import/build-testsuite.xml 2009-12-10 07:14:15 UTC (rev 11254) +++ framework/trunk/testsuite/test/ant-import/build-testsuite.xml 2009-12-10 07:47:39 UTC (rev 11255) @@ -289,6 +289,7 @@ <pathelement location="${jboss.client}/jboss-ejb3-client.jar"/> <pathelement location="${jboss.client}/jboss-ejb3-ext-api.jar"/> <pathelement location="${jboss.client}/jboss-logging-spi.jar"/> + <pathelement location="${jboss.client}/jboss-metadata.jar"/> <pathelement location="${jboss.client}/jboss-metadata-client.jar"/> <pathelement location="${jboss.client}/jboss-metadata-common.jar"/> <pathelement location="${jboss.client}/jboss-remoting.jar"/> @@ -320,6 +321,7 @@ <pathelement location="${jboss.client}/jboss-appclient.jar"/> <pathelement location="${jboss.client}/jboss-container-metadata.jar"/> <pathelement location="${jboss.client}/jboss-ejb3-ext-api.jar"/> + <pathelement location="${jboss.client}/jboss-metadata.jar"/> <pathelement location="${jboss.client}/jboss-metadata-client.jar"/> <pathelement location="${jboss.client}/jboss-metadata-common.jar"/> <pathelement location="${jboss.client}/jboss-remoting.jar"/>

14 years, 5 months

1
0
0 / 0

JBossWS SVN: r11254 - in stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr: jboss-5.0.0.GA and 1 other directories.

by jbossws-commits＠lists.jboss.org

Author: jim.ma Date: 2009-12-10 02:14:15 -0500 (Thu, 10 Dec 2009) New Revision: 11254 Added: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.0.0.GA/ stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.0.0.GA/server.policy stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.0.1.GA/ stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.0.1.GA/server.policy Log: [JBWS-2692]:Added server policy for AS 5.0.0 and 5.0.1 Added: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.0.0.GA/server.policy =================================================================== --- stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.0.0.GA/server.policy (rev 0) +++ stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.0.0.GA/server.policy 2009-12-10 07:14:15 UTC (rev 11254) @@ -0,0 +1,322 @@ +// The Java2 security policy for the securitymgr tests +// Install with -Djava.security.policy==server.policy +// and -Djboss.home.dir=path_to_jboss_distribution + +// *************************************** +// Trusted core Java code +//*************************************** +grant codeBase "file:${java.home}/lib/ext/-" { + permission java.security.AllPermission; +}; +grant codeBase "file:${java.home}/lib/*" { + permission java.security.AllPermission; +}; +// For java.home pointing to the JDK jre directory +grant codeBase "file:${java.home}/../lib/*" { + permission java.security.AllPermission; +}; + + + + +//******************************************** +// Trusted core JBoss code (REAL URL Version) +//******************************************** +grant codeBase "file:${jboss.home.dir}/bin/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/common/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/server/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deployers/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/work/-" { + permission java.security.AllPermission; +}; + + +//******************************************** +// Trusted core JBoss code (VFS URL Version) +//******************************************** +grant codeBase "vfszip:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.home.dir}/common/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.home.dir}/server/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deployers/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/work/-" { + permission java.security.AllPermission; +}; + + +//******************************************************* +// Trusted Specific JBoss Code (REAL URL Version) +//******************************************************* +grant codeBase "file:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jmx-remoting.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission java.net.SocketPermission "*", "accept,listen,resolve"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/jsf-libs/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar/-" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar!/jboss-local-jdbc.jar" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/management/console-mgr.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","*"; + permission java.io.FilePermission "<<ALL FILES>>", "read"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jms-ra.rar!/jms-ra.jar" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jms-ra.rar/jms-ra.jar!/" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/quartz-ra.rar!/quartz-ra.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/quartz-ra.rar/quartz-ra.jar!/" { + permission java.security.AllPermission; +}; + + + +//******************************************************* +// Trusted Specific JBoss Code (VFS URL Version) +//******************************************************* +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jmx-remoting.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission java.net.SocketPermission "*", "accept,listen,resolve"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jboss-web-service.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jbossweb.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/jbossweb.sar/jbossweb.jar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jsf-libs/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jasper-jdt.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jstl.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar/-" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/management/console-mgr.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","*"; + permission java.io.FilePermission "<<ALL FILES>>", "read"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jms-ra.rar/jms-ra.jar" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/quartz-ra.rar/quartz-ra.jar" { + permission java.security.AllPermission; +}; + +//**************************************************************** +// jbossws cxf permission +//**************************************************************** +//for juddi deployment +grant codeBase "file:${jboss.server.home.dir}/deploy/juddi-service.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission org.jboss.naming.JndiPermission "JAXR", "rebind"; +}; +//for admin console- TODO:Review it +grant codeBase "file:${jboss.server.home.dir}/deployers/jbossweb.deployer/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/admin-console.war/-" { + permission java.security.AllPermission; +}; + +//**************************************************************** +// Default block of permissions +// Minimal permissions are allowed to everyone else +//**************************************************************** +grant { + permission java.io.FilePermission "${jboss.server.home.dir}/tmp/-", "read"; + permission java.io.FilePermission "${jboss.home.dir}/server/lib/quartz.jar/org/quartz/quartz.properties", "read"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "quartz.properties", "read"; + permission java.util.PropertyPermission "*", "read"; + permission java.lang.RuntimePermission "queuePrintJob"; + permission java.net.SocketPermission "*", "connect"; + permission java.security.SecurityPermission "getPolicy"; + permission java.lang.RuntimePermission "accessClassInPackage.*"; + permission java.lang.RuntimePermission "getProtectionDomain"; + permission java.lang.RuntimePermission "org.jboss.security.SecurityAssociation.getSubject"; + permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.getSubjectInfo"; + + permission javax.management.MBeanServerPermission "findMBeanServer"; + permission javax.management.MBeanPermission "org.jboss.mx.modelmbean.XMBean#*[JMImplementation:type=MBeanRegistry]", "*"; + permission javax.management.MBeanPermission "org.jboss.security.plugins.AuthorizationManagerService#*[jboss.security:service=AuthorizationManager]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.jms.server.jbosssx.JBossASSecurityMetadataStore#*[jboss.messaging:service=SecurityStore]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.security.auth.login.XMLLoginConfig#*[jboss.security:service=XMLLoginConfig]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.security.plugins.JaasSecurityManagerService#*[jboss.security:service=JaasSecurityManager]", "invoke"; + permission javax.management.MBeanPermission "*", "getMBeanInfo"; + permission javax.management.MBeanPermission "*", "getAttribute"; + + permission javax.security.auth.AuthPermission "createLoginContext.*"; + permission javax.security.auth.AuthPermission "getLoginConfiguration"; + + //admin-console + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","rebind,createSubcontext"; + permission java.util.logging.LoggingPermission "control"; + permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "addNotificationListener"; + + //CXF annotation vistor uses reflection to process annotation + permission java.lang.RuntimePermission "accessDeclaredMembers"; + permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; + + //for frameworktest org.jboss.test.ws.jaxws.smoke.tools.WSRunClientTestCase.test() + permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.getData"; + + //add write permission to frameworktest : org.jboss.test.ws.jaxws.jbws2000.JBWS2000TestCase + permission java.io.FilePermission "/tmp/-", "write,delete"; + //frameworktest : org.jboss.test.ws.jaxws.jbws1822.JBWS1822TestCase + permission java.lang.RuntimePermission "createClassLoader"; + //Allow client to regiester MBean : org.jboss.test.ws.management.recording.CustomRecordProcessorTestCase.testAddCustomProcessor() + permission javax.management.MBeanTrustPermission "register"; +}; Added: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.0.1.GA/server.policy =================================================================== --- stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.0.1.GA/server.policy (rev 0) +++ stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.0.1.GA/server.policy 2009-12-10 07:14:15 UTC (rev 11254) @@ -0,0 +1,327 @@ +// The Java2 security policy for the securitymgr tests +// Install with -Djava.security.policy==server.policy +// and -Djboss.home.dir=path_to_jboss_distribution + +// *************************************** +// Trusted core Java code +//*************************************** +grant codeBase "file:${java.home}/lib/ext/-" { + permission java.security.AllPermission; +}; +grant codeBase "file:${java.home}/lib/*" { + permission java.security.AllPermission; +}; +// For java.home pointing to the JDK jre directory +grant codeBase "file:${java.home}/../lib/*" { + permission java.security.AllPermission; +}; + + + + +//******************************************** +// Trusted core JBoss code (REAL URL Version) +//******************************************** +grant codeBase "file:${jboss.home.dir}/bin/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/common/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.home.dir}/server/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deployers/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/work/-" { + permission java.security.AllPermission; +}; + + +//******************************************** +// Trusted core JBoss code (VFS URL Version) +//******************************************** +grant codeBase "vfszip:${jboss.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.home.dir}/common/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.home.dir}/server/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/lib/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deployers/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/work/-" { + permission java.security.AllPermission; +}; + + +//******************************************************* +// Trusted Specific JBoss Code (REAL URL Version) +//******************************************************* +grant codeBase "file:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jmx-remoting.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission java.net.SocketPermission "*", "accept,listen,resolve"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/jsf-libs/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar/-" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar!/jboss-local-jdbc.jar" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/management/console-mgr.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","*"; + permission java.io.FilePermission "<<ALL FILES>>", "read"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jms-ra.rar!/jms-ra.jar" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/jms-ra.rar/jms-ra.jar!/" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/quartz-ra.rar!/quartz-ra.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "jar:file:${jboss.server.home.dir}/deploy/quartz-ra.rar/quartz-ra.jar!/" { + permission java.security.AllPermission; +}; + + + +//******************************************************* +// Trusted Specific JBoss Code (VFS URL Version) +//******************************************************* +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" { + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/jmx-console.war/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jmx-remoting.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission java.net.SocketPermission "*", "accept,listen,resolve"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jboss-web-service.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jbossweb.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/jbossweb.sar/jbossweb.jar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jsf-libs/-" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jasper-jdt.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jbossweb.sar/jstl.jar" { + permission java.security.AllPermission; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar/-" { + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/management/console-mgr.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","*"; + permission java.io.FilePermission "<<ALL FILES>>", "read"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission javax.management.MBeanPermission "*", "getAttribute"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind"; + permission java.lang.RuntimePermission "getClassLoader"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jms-ra.rar/jms-ra.jar" { + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read"; + permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute"; +}; + +grant codeBase "vfszip:${jboss.server.home.dir}/deploy/quartz-ra.rar/quartz-ra.jar" { + permission java.security.AllPermission; +}; + +//**************************************************************** +// jbossws cxf permission +//**************************************************************** +//for juddi deployment +grant codeBase "file:${jboss.server.home.dir}/deploy/juddi-service.sar/-" { + permission javax.management.MBeanTrustPermission "register"; + permission org.jboss.naming.JndiPermission "JAXR", "rebind"; +}; +//for admin console- TODO:Review it +grant codeBase "file:${jboss.server.home.dir}/deployers/jbossweb.deployer/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/-" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${jboss.server.home.dir}/deploy/admin-console.war/-" { + permission java.security.AllPermission; +}; + + + +//**************************************************************** +// Default block of permissions +// Minimal permissions are allowed to everyone else +//**************************************************************** +grant { + permission java.io.FilePermission "${jboss.server.home.dir}/tmp/-", "read"; + permission java.io.FilePermission "${jboss.home.dir}/server/lib/quartz.jar/org/quartz/quartz.properties", "read"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; + permission java.io.FilePermission "quartz.properties", "read"; + permission java.util.PropertyPermission "*", "read"; + permission java.lang.RuntimePermission "queuePrintJob"; + permission java.net.SocketPermission "*", "connect"; + permission java.security.SecurityPermission "getPolicy"; + permission java.lang.RuntimePermission "accessClassInPackage.*"; + permission java.lang.RuntimePermission "getProtectionDomain"; + permission java.lang.RuntimePermission "org.jboss.security.SecurityAssociation.getSubject"; + permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.getSubjectInfo"; + + permission javax.management.MBeanServerPermission "findMBeanServer"; + permission javax.management.MBeanPermission "org.jboss.mx.modelmbean.XMBean#*[JMImplementation:type=MBeanRegistry]", "*"; + permission javax.management.MBeanPermission "org.jboss.security.plugins.AuthorizationManagerService#*[jboss.security:service=AuthorizationManager]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.jms.server.jbosssx.JBossASSecurityMetadataStore#*[jboss.messaging:service=SecurityStore]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.security.auth.login.XMLLoginConfig#*[jboss.security:service=XMLLoginConfig]", "invoke"; + permission javax.management.MBeanPermission "org.jboss.security.plugins.JaasSecurityManagerService#*[jboss.security:service=JaasSecurityManager]", "invoke"; + permission javax.management.MBeanPermission "*", "getMBeanInfo"; + permission javax.management.MBeanPermission "*", "getAttribute"; + + permission javax.security.auth.AuthPermission "createLoginContext.*"; + permission javax.security.auth.AuthPermission "getLoginConfiguration"; + + permission java.io.FilePermission "<<ALL FILES>>", "read"; + + //admin-console + permission java.lang.RuntimePermission "getClassLoader"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","rebind,createSubcontext"; + permission java.util.logging.LoggingPermission "control"; + permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "addNotificationListener"; + + //CXF annotation vistor uses reflection to process annotation + permission java.lang.RuntimePermission "accessDeclaredMembers"; + permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; + + //for frameworktest org.jboss.test.ws.jaxws.smoke.tools.WSRunClientTestCase.test() + permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.getData"; + + //add write permission to frameworktest : org.jboss.test.ws.jaxws.jbws2000.JBWS2000TestCase + permission java.io.FilePermission "/tmp/-", "write,delete"; + //frameworktest : org.jboss.test.ws.jaxws.jbws1822.JBWS1822TestCase + permission java.lang.RuntimePermission "createClassLoader"; + //Allow client to regiester MBean : org.jboss.test.ws.management.recording.CustomRecordProcessorTestCase.testAddCustomProcessor() + permission javax.management.MBeanTrustPermission "register"; + +};

14 years, 5 months

1
0
0 / 0

JBossWS SVN: r11253 - in stack/cxf/branches/jbossws-cxf-3.1.2/modules: server and 1 other directory.

by jbossws-commits＠lists.jboss.org

Author: fnasser(a)redhat.com Date: 2009-12-09 23:45:38 -0500 (Wed, 09 Dec 2009) New Revision: 11253 Modified: stack/cxf/branches/jbossws-cxf-3.1.2/modules/client/pom.xml stack/cxf/branches/jbossws-cxf-3.1.2/modules/server/pom.xml Log: Use our groupId for xmlsec and asm and for FastInfoset -- part2 Modified: stack/cxf/branches/jbossws-cxf-3.1.2/modules/client/pom.xml =================================================================== --- stack/cxf/branches/jbossws-cxf-3.1.2/modules/client/pom.xml 2009-12-10 04:20:49 UTC (rev 11252) +++ stack/cxf/branches/jbossws-cxf-3.1.2/modules/client/pom.xml 2009-12-10 04:45:38 UTC (rev 11253) @@ -123,11 +123,11 @@ <artifactId>stax-api</artifactId> </dependency> <dependency> - <groupId>org.apache.santuario</groupId> + <groupId>org.apache</groupId> <artifactId>xmlsec</artifactId> </dependency> <dependency> - <groupId>asm</groupId> + <groupId>org.objectweb.asm</groupId> <artifactId>asm</artifactId> </dependency> @@ -158,7 +158,7 @@ <artifactId>log4j</artifactId> </dependency> <dependency> - <groupId>com.sun.xml.fastinfoset</groupId> + <groupId>sun-fi</groupId> <artifactId>FastInfoset</artifactId> </dependency> </dependencies> Modified: stack/cxf/branches/jbossws-cxf-3.1.2/modules/server/pom.xml =================================================================== --- stack/cxf/branches/jbossws-cxf-3.1.2/modules/server/pom.xml 2009-12-10 04:20:49 UTC (rev 11252) +++ stack/cxf/branches/jbossws-cxf-3.1.2/modules/server/pom.xml 2009-12-10 04:45:38 UTC (rev 11253) @@ -127,11 +127,11 @@ <artifactId>stax-api</artifactId> </dependency> <dependency> - <groupId>org.apache.santuario</groupId> + <groupId>org.apache</groupId> <artifactId>xmlsec</artifactId> </dependency> <dependency> - <groupId>asm</groupId> + <groupId>org.objectweb.asm</groupId> <artifactId>asm</artifactId> </dependency> @@ -149,7 +149,7 @@ <artifactId>jboss-ejb-api</artifactId> </dependency> <dependency> - <groupId>com.sun.xml.fastinfoset</groupId> + <groupId>sun-fi</groupId> <artifactId>FastInfoset</artifactId> </dependency>

14 years, 5 months

1
0
0 / 0

JBossWS SVN: r11252 - stack/cxf/branches/jbossws-cxf-3.1.2.

by jbossws-commits＠lists.jboss.org

Author: fnasser(a)redhat.com Date: 2009-12-09 23:20:49 -0500 (Wed, 09 Dec 2009) New Revision: 11252 Modified: stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml Log: Use our groupId for xmlsec and asm; one more exclusion for geronimo-ws-metadata Modified: stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml =================================================================== --- stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml 2009-12-10 04:18:20 UTC (rev 11251) +++ stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml 2009-12-10 04:20:49 UTC (rev 11252) @@ -265,6 +265,10 @@ </exclusion> <exclusion> <groupId>org.apache.geronimo.specs</groupId> + <artifactId>geronimo-ws-metadata_2.0_spec</artifactId> + </exclusion> + <exclusion> + <groupId>org.apache.geronimo.specs</groupId> <artifactId>geronimo-jaxws_2.1_spec</artifactId> </exclusion> </exclusions> @@ -433,12 +437,12 @@ <version>${cxf.stax.version}</version> </dependency> <dependency> - <groupId>org.apache.santuario</groupId> + <groupId>org.apache</groupId> <artifactId>xmlsec</artifactId> <version>${xmlsec.version}</version> </dependency> <dependency> - <groupId>asm</groupId> + <groupId>org.objectweb.asm</groupId> <artifactId>asm</artifactId> <version>${cxf.asm.version}</version> </dependency>

14 years, 5 months

1
0
0 / 0

JBossWS SVN: r11251 - stack/cxf/trunk/modules/server/src/main/java/org/jboss/wsf/stack/cxf.

by jbossws-commits＠lists.jboss.org

Author: jim.ma Date: 2009-12-09 23:18:20 -0500 (Wed, 09 Dec 2009) New Revision: 11251 Modified: stack/cxf/trunk/modules/server/src/main/java/org/jboss/wsf/stack/cxf/CXFServletExt.java Log: [JBWS-2791]:revert the use reflection stuff change Modified: stack/cxf/trunk/modules/server/src/main/java/org/jboss/wsf/stack/cxf/CXFServletExt.java =================================================================== --- stack/cxf/trunk/modules/server/src/main/java/org/jboss/wsf/stack/cxf/CXFServletExt.java 2009-12-10 04:13:04 UTC (rev 11250) +++ stack/cxf/trunk/modules/server/src/main/java/org/jboss/wsf/stack/cxf/CXFServletExt.java 2009-12-10 04:18:20 UTC (rev 11251) @@ -129,7 +129,6 @@ //Load additional configurations loadAdditionalConfigExt(appCtx, servletConfig); - correctJmsEndpointAddress(endpoint, bus); } private void initEndpoint(ServletConfig servletConfig) @@ -268,52 +267,4 @@ throw new ServletException(e); } } - - private void correctJmsEndpointAddress(Endpoint endpoint, Bus bus) throws ServletException { - for (Server server : bus.getExtension(ServerRegistry.class).getServers()) { - if (server.getEndpoint() instanceof JaxWsEndpointImpl) { - JaxWsEndpointImpl endpointImpl = (JaxWsEndpointImpl)server.getEndpoint(); - try - { - Field field = JaxWsEndpointImpl.class.getDeclaredField("implInfo"); - field.setAccessible(true); - Object object = field.get(endpointImpl); - if (object != null) { - JaxWsImplementorInfo implementInfo = (JaxWsImplementorInfo)object; - Class endpointClass = implementInfo.getImplementorClass(); - if (endpoint.getTargetBeanClass().getName().equals(endpointClass.getName()) - && JMS_NS.equals(server.getEndpoint().getEndpointInfo().getTransportId())) { - //server.getDestination().getAddress() - AddressType address = server.getEndpoint().getEndpointInfo().getExtensor(AddressType.class); - if (address == null) - { - //java first : the address is from jbossws-cxf.xml - JMSDestination jmsDestination = (JMSDestination)server.getDestination(); - String url = "jms://" + jmsDestination.getJmsConfig().getTargetDestination(); - if (jmsDestination.getJmsConfig().getReplyDestination() != null) { - url = url + "?replyToName=" + jmsDestination.getJmsConfig().getReplyDestination(); - endpoint.setAddress(url); - } - - } else - { - //wsdl first: the address is from wsdl - String jmsURL = "jms://" + address.getJndiDestinationName(); - if (address.getJndiReplyDestinationName() != null) - { - jmsURL = jmsURL + "?replyToName=" + address.getJndiReplyDestinationName(); - endpoint.setAddress(jmsURL); - } - } - } - - } - } - catch (Exception e) - { - throw new ServletException(e); - } - } - } - } }

14 years, 5 months

1
0
0 / 0

JBossWS SVN: r11250 - stack/cxf/branches/jbossws-cxf-3.1.2.

by jbossws-commits＠lists.jboss.org

Author: fnasser(a)redhat.com Date: 2009-12-09 23:13:04 -0500 (Wed, 09 Dec 2009) New Revision: 11250 Modified: stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml Log: One more exclusion for Geronimo stax Modified: stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml =================================================================== --- stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml 2009-12-10 04:11:50 UTC (rev 11249) +++ stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml 2009-12-10 04:13:04 UTC (rev 11250) @@ -278,6 +278,10 @@ <groupId>javax.ws.rs</groupId> <artifactId>jsr311-api</artifactId> </exclusion> + <exclusion> + <groupId>org.apache.geronimo.specs</groupId> + <artifactId>geronimo-stax-api_1.0_spec</artifactId> + </exclusion>  <exclusion> <groupId>org.springframework</groupId>

14 years, 5 months

1
0
0 / 0

JBossWS SVN: r11248 - in stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr: jboss-5.1.0.GA and 1 other directory.

by jbossws-commits＠lists.jboss.org

Author: jim.ma Date: 2009-12-09 23:11:49 -0500 (Wed, 09 Dec 2009) New Revision: 11248 Added: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/client.policy Removed: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.1.0.GA/client.policy Modified: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.1.0.GA/server.policy Log: [JBWS-2692]:Minimize the granted permission in client and server policy Added: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/client.policy =================================================================== --- stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/client.policy (rev 0) +++ stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/client.policy 2009-12-10 04:11:49 UTC (rev 11248) @@ -0,0 +1,71 @@ +// Permissions for jbossws cxf test suite + +// Trusted core Java code +grant codeBase "file:${java.home}/lib/ext/-" { + permission java.security.AllPermission; +}; + +//for javac +grant codeBase "file:${java.home}/../lib" { + permission java.security.AllPermission; +}; + +grant codeBase "file:${java.home}/lib/-" { + permission java.security.AllPermission; +}; + + +grant { + //allow surefire to read compiled class in target dir, WSConsumerTestCase javac needs execute permission + permission java.io.FilePermission "<<ALL FILES>>", "execute,read"; + permission java.util.PropertyPermission "*", "read,write"; + permission java.util.logging.LoggingPermission "control"; + //for test + permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; + permission java.lang.RuntimePermission "accessDeclaredMembers"; + permission java.net.SocketPermission "*", "connect,resolve"; + permission java.lang.RuntimePermission "createClassLoader"; + permission java.lang.RuntimePermission "setContextClassLoader"; + permission java.lang.RuntimePermission "org.jboss.security.getSecurityContext"; + permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.getSubjectInfo"; + permission java.lang.RuntimePermission "setIO"; + permission java.lang.RuntimePermission "setFactory"; + permission java.lang.RuntimePermission "modifyThreadGroup"; + + permission java.lang.RuntimePermission "org.jboss.security.SecurityAssociation.getPrincipalInfo"; + permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.setSubjectInfo"; + + permission org.jboss.metadata.spi.stack.MetaDataStackPermission "*"; + permission java.lang.RuntimePermission "org.jboss.security.setSecurityContext"; + permission java.lang.RuntimePermission "createSecurityManager"; + //AsymmetricBindingClientTestCase + permission java.security.SecurityPermission "insertProvider.BC"; + permission java.security.SecurityPermission "putProviderProperty.BC"; + permission java.lang.RuntimePermission "getClassLoader"; + + permission java.lang.RuntimePermission "accessClassInPackage.*"; + permission java.io.SerializablePermission "enableSubstitution"; + permission javax.xml.ws.WebServicePermission "publishEndpoint"; + permission java.lang.RuntimePermission "getenv.*"; + + permission java.io.FilePermission "${java.home}/-", "execute"; + + permission java.io.FilePermission "${jboss.home}/bin/-", "execute"; + + permission java.net.SocketPermission "*","accept,listen,resolve"; + permission java.security.SecurityPermission "getPolicy"; + permission java.security.SecurityPermission "getAccessControlContext"; + + permission java.io.FilePermission "${target.dir}/-", "write,delete"; + + //WSConsumerTestCase + permission java.io.FilePermission "./-", "write,delete"; + permission java.io.FilePermission "/tmp", "write,delete"; + permission java.io.FilePermission "/tmp/-", "write,delete"; + permission java.lang.RuntimePermission "shutdownHooks"; + permission java.lang.RuntimePermission "getProtectionDomain"; +}; + + + + Deleted: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.1.0.GA/client.policy =================================================================== --- stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.1.0.GA/client.policy 2009-12-10 03:16:35 UTC (rev 11247) +++ stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.1.0.GA/client.policy 2009-12-10 04:11:49 UTC (rev 11248) @@ -1,62 +0,0 @@ -// Permissions for jbossws cxf test suite - -// Trusted core Java code -grant codeBase "file:${java.home}/lib/ext/-" { - permission java.security.AllPermission; -}; - -//for javac -grant codeBase "file:${java.home}/../lib" { - permission java.security.AllPermission; -}; - -grant codeBase "file:${java.home}/lib/-" { - permission java.security.AllPermission; -}; - -//trust all jars in m2_repo -grant codeBase "file:${M2_REPO}/-" { - permission java.security.AllPermission; -}; - -grant { - //allow surefire to read compiled class in target dir, WSConsumerTestCase javac needs execute permission - permission java.io.FilePermission "<<ALL FILES>>", "execute, read"; - permission java.util.PropertyPermission "*", "read,write"; - permission java.util.logging.LoggingPermission "control"; - //for test - permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; - permission java.lang.RuntimePermission "accessDeclaredMembers"; - permission java.net.SocketPermission "*", "connect,resolve"; - permission java.lang.RuntimePermission "createClassLoader"; - permission java.lang.RuntimePermission "setContextClassLoader"; - //AsymmetricBindingClientTestCase - permission java.security.SecurityPermission "insertProvider.BC"; - permission java.security.SecurityPermission "putProviderProperty.BC"; - permission java.lang.RuntimePermission "getClassLoader"; - - permission java.lang.RuntimePermission "accessClassInPackage.*"; - permission java.io.SerializablePermission "enableSubstitution"; - permission javax.xml.ws.WebServicePermission "publishEndpoint"; - permission java.lang.RuntimePermission "getenv.*"; - - permission java.io.FilePermission "${java.home}/-", "execute"; - - permission java.io.FilePermission "${jboss.home}/bin/-", "execute"; - - permission java.net.SocketPermission "*","accept,listen,resolve"; - permission java.security.SecurityPermission "getPolicy"; - - permission java.io.FilePermission "${target.dir}/-", "write,delete"; - - //WSConsumerTestCase - permission java.io.FilePermission "./-", "write,delete"; - - permission java.io.FilePermission "/tmp/-", "write,delete"; - permission java.lang.RuntimePermission "shutdownHooks"; - permission java.lang.RuntimePermission "getProtectionDomain"; -}; - - - - Modified: stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.1.0.GA/server.policy =================================================================== --- stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.1.0.GA/server.policy 2009-12-10 03:16:35 UTC (rev 11247) +++ stack/cxf/trunk/modules/testsuite/src/test/resources/securityMgr/jboss-5.1.0.GA/server.policy 2009-12-10 04:11:49 UTC (rev 11248) @@ -266,95 +266,7 @@ permission java.security.AllPermission; }; -//*************************************************************** -// JBoss AS Test Suite Permissions (REAL URL Version) -//*************************************************************** -// Permissions for the WarPermissionsUnitTestCase -grant codeBase "file:${jboss.test.deploy.dir}/securitymgr/-" { - permission java.util.PropertyPermission "*", "read"; - permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete"; - permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; -}; - -grant codeBase "file:${jboss.test.deploy.dir}/securitymgr/-" { - permission java.util.PropertyPermission "*", "read"; - permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete"; -}; - -grant codeBase "file:${jboss.test.deploy.dir}/jbosstest-web.ear/-" { - permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","list,lookup"; - permission org.jboss.naming.JndiPermission "env","list"; - permission java.io.FilePermission "<<ALL FILES>>", "read"; - permission java.lang.RuntimePermission "getClassLoader"; - permission java.lang.RuntimePermission "getProtectionDomain"; -}; - -grant codeBase "jar:file:${jboss.test.deploy.dir}/jbosstest-web.ear!/jbosstest-web.war" { - permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","list,lookup"; - permission org.jboss.naming.JndiPermission "env","list"; - permission java.io.FilePermission "<<ALL FILES>>", "read"; - permission java.lang.RuntimePermission "getClassLoader"; - permission java.lang.RuntimePermission "getProtectionDomain"; -}; -grant codeBase "jar:file:${jboss.test.deploy.dir}/jbosstest-web.ear!/lib/util.jar" { - permission java.lang.RuntimePermission "getClassLoader"; - permission java.lang.RuntimePermission "getProtectionDomain"; -}; - - -grant codeBase "file:${jboss.test.deploy.dir}/-" { - permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","listBindings,lookup"; -}; - -grant codeBase "file:${jboss.test.deploy.dir}/class-loading.war/WEB-INF/classes/" { - permission java.lang.RuntimePermission "getClassLoader"; - permission java.lang.RuntimePermission "getProtectionDomain"; - permission javax.management.MBeanPermission "*", "getMBeanInfo"; -}; - -grant codeBase "file:${jboss.test.deploy.dir}/security-ejb3.jar" { - permission java.lang.RuntimePermission "createClassLoader"; -}; - -grant codeBase "jar:file:${jboss.test.deploy.dir}/security-ejb3.jar!/-" { - permission java.security.AllPermission; -}; - -//*************************************************************** -// JBoss AS Test Suite Permissions (VFS URL Version) -//*************************************************************** - -// Permissions for the WarPermissionsUnitTestCase -grant codeBase "vfszip:${jboss.test.deploy.dir}/securitymgr/-" { - permission java.util.PropertyPermission "*", "read"; - permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete"; - permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup"; -}; - -grant codeBase "vfsfile:${jboss.test.deploy.dir}/securitymgr/-" { - permission java.util.PropertyPermission "*", "read"; - permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete"; -}; - -grant codeBase "vfszip:${jboss.test.deploy.dir}/jbosstest-web.ear/-" { - permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","list,lookup"; - permission org.jboss.naming.JndiPermission "env","list"; - permission java.io.FilePermission "<<ALL FILES>>", "read"; - permission java.lang.RuntimePermission "getClassLoader"; - permission java.lang.RuntimePermission "getProtectionDomain"; -}; - -grant codeBase "vfszip:${jboss.test.deploy.dir}/-" { - permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","listBindings,lookup"; -}; - -grant codeBase "vfszip:${jboss.test.deploy.dir}/class-loading.war/WEB-INF/classes/" { - permission java.lang.RuntimePermission "getClassLoader"; - permission java.lang.RuntimePermission "getProtectionDomain"; - permission javax.management.MBeanPermission "*", "getMBeanInfo"; -}; - grant codeBase "vfsmemory://*" { permission java.security.AllPermission; }; @@ -411,16 +323,20 @@ permission javax.security.auth.AuthPermission "createLoginContext.*"; permission javax.security.auth.AuthPermission "getLoginConfiguration"; - //TODO: use codeBase permission //admin-console permission java.lang.RuntimePermission "getClassLoader"; - permission org.jboss.naming.JndiPermission "rebind"; + permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","rebind,createSubcontext"; permission java.util.logging.LoggingPermission "control"; + permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "addNotificationListener"; + // for org.jboss.test.ws.jaxws.cxf.webserviceref.WebServiceRefServletTestCase.testServletClient() permission java.io.FilePermission "<<ALL FILES>>", "read"; + + //CXF annotation vistor uses reflection to process annotation permission java.lang.RuntimePermission "accessDeclaredMembers"; permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; + // for frameworktest org.jboss.test.ws.jaxws.smoke.tools.WSRunClientTestCase.test() permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.getData";

14 years, 5 months

1
0
0 / 0

JBossWS SVN: r11249 - stack/cxf/branches/jbossws-cxf-3.1.2.

by jbossws-commits＠lists.jboss.org

Author: fnasser(a)redhat.com Date: 2009-12-09 23:11:50 -0500 (Wed, 09 Dec 2009) New Revision: 11249 Modified: stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml Log: Use our groupId for FastInfoset Modified: stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml =================================================================== --- stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml 2009-12-10 04:11:49 UTC (rev 11248) +++ stack/cxf/branches/jbossws-cxf-3.1.2/pom.xml 2009-12-10 04:11:50 UTC (rev 11249) @@ -143,7 +143,7 @@ <version>1.0-MR1</version> </dependency> <dependency> - <groupId>com.sun.xml.fastinfoset</groupId> + <groupId>sun-fi</groupId> <artifactId>FastInfoset</artifactId> <version>${fastinfoset.api.version}</version> </dependency>

14 years, 5 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jbossws-commits December 2009