[jboss-jira] [JBoss JIRA] (WFLY-6184) "java.lang.RuntimePermission" by some tests running with security manager

[David Lloyd (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-6184?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13162239#comment-13162239 ] 

David Lloyd commented on WFLY-6184:
-----------------------------------

I don't think it makes sense to require the caller of the constructor of Configuration to have the createClassLoader permission.  Hibernate's "org.hibernate.boot.registry.BootstrapServiceRegistryBuilder.build(BootstrapServiceRegistryBuilder.java:207)" should be creating the class loader in a privileged block, and perhaps in turn should require some kind of "create configuration" permission.

> "java.lang.RuntimePermission" by some tests running with security manager
> -------------------------------------------------------------------------
>
>                 Key: WFLY-6184
>                 URL: https://issues.jboss.org/browse/WFLY-6184
>             Project: WildFly
>          Issue Type: Bug
>          Components: Test Suite
>            Reporter: Hynek Švábek
>
> Some tests fail with java.security.AccessControlException: WFSM000001: Permission check failed "java.lang.RuntimePermission" "createClassLoader" when security manager is enabled.
> {code}
> Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.lang.RuntimePermission" "createClassLoader")" in code source "(vfs:/content/hibernate4native_transactiontest.ear/beans.jar <no signer certificates>)" of "null")
> 	at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:273)
> 	at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175)
> 	at java.lang.SecurityManager.checkCreateClassLoader(SecurityManager.java:611)
> 	at org.wildfly.security.manager.WildFlySecurityManager.checkCreateClassLoader(WildFlySecurityManager.java:335)
> 	at java.lang.ClassLoader.checkCreateClassLoader(ClassLoader.java:274)
> 	at java.lang.ClassLoader.<init>(ClassLoader.java:316)
> 	at org.hibernate.boot.registry.classloading.internal.ClassLoaderServiceImpl$AggregatedClassLoader.<init>(ClassLoaderServiceImpl.java:164)
> 	at org.hibernate.boot.registry.classloading.internal.ClassLoaderServiceImpl$AggregatedClassLoader.<init>(ClassLoaderServiceImpl.java:160)
> 	at org.hibernate.boot.registry.classloading.internal.ClassLoaderServiceImpl.<init>(ClassLoaderServiceImpl.java:94)
> 	at org.hibernate.boot.registry.BootstrapServiceRegistryBuilder.build(BootstrapServiceRegistryBuilder.java:207)
> 	at org.hibernate.cfg.Configuration.<init>(Configuration.java:119)
> 	at org.jboss.as.test.integration.hibernate.SFSBHibernateTransaction.setupConfig(SFSBHibernateTransaction.java:63)
> 	... 200 more
> {code}
> Falling tests
> *    ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.hibernate.Hibernate2LCacheStatsTestCase#testHibernateStatistics
>     org.jboss.as.test.integration.hibernate.Hibernate2LCacheStatsTestCase#testHibernateStatistics
>  *   ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.hibernate.Hibernate4NativeAPIProviderTestCase#testSimpleOperation
>     org.jboss.as.test.integration.hibernate.Hibernate4NativeAPIProviderTestCase#testSimpleOperation
> *    ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.hibernate.HibernateNativeAPITransactionTestCase
>     org.jboss.as.test.integration.hibernate.HibernateNativeAPITransactionTestCase#testRollBackOperation
>     org.jboss.as.test.integration.hibernate.HibernateNativeAPITransactionTestCase#testSimpleOperation
> *    ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.hibernate.envers.Hibernate4NativeAPIEnversTestCase#testEnversonHibernateNativeAPI
>     org.jboss.as.test.integration.hibernate.envers.Hibernate4NativeAPIEnversTestCase#testEnversonHibernateNativeAPI
>  *   ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.hibernate.search.HibernateSearchJPATestCase#testFullTextQuery
>     org.jboss.as.test.integration.hibernate.search.HibernateSearchJPATestCase#testFullTextQuery
>  *   ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.hibernate.secondlevelcache.HibernateSecondLevelCacheTestCase#testSecondLevelCache
>     org.jboss.as.test.integration.hibernate.secondlevelcache.HibernateSecondLevelCacheTestCase#testSecondLevelCache
>  *   ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.jpa.dsrestart.JpaDsRestartTestCase#testRestartDataSource
>     org.jboss.as.test.integration.jpa.dsrestart.JpaDsRestartTestCase#testRestartDataSource
>  *   ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.jpa.hibernate.envers.AuditJoinTableoverBidirectionalTest#testRevisionsforValidityStrategyoverManytoOne
>     org.jboss.as.test.integration.jpa.hibernate.envers.AuditJoinTableoverBidirectionalTest#testRevisionsforValidityStrategyoverManytoOne
>  *   ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.jpa.hibernate.envers.AuditJoinTableoverOnetoManyJoinColumnTest#testRevisionsfromAuditJoinTable
>     org.jboss.as.test.integration.jpa.hibernate.envers.AuditJoinTableoverOnetoManyJoinColumnTest#testRevisionsfromAuditJoinTable
>  *   ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.jpa.hibernate.envers.basicenverstest.BasicEnversTestCase
>     org.jboss.as.test.integration.jpa.hibernate.envers.basicenverstest.BasicEnversTestCase#testSimpleEnversOperation
>     org.jboss.as.test.integration.jpa.hibernate.envers.basicselectiveenverstest.BasicSelectiveEnversTestCase#testSelectiveEnversOperations
>  *   ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.jpa.hibernate.envers.implementvalidityauditstrategytest.ImplementValidityAuditStrategyTestCase#testEnversforValidityStrategy
>     org.jboss.as.test.integration.jpa.hibernate.envers.implementvalidityauditstrategytest.ImplementValidityAuditStrategyTestCase#testEnversforValidityStrategy
>  *   ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.jpa.hibernate.envers.validityauditstrategyoninheritancetest.ValidityAuditStrategyonInheritanceTestCase#testValidityStrategyonInheritance
>     org.jboss.as.test.integration.jpa.hibernate.envers.validityauditstrategyoninheritancetest.ValidityAuditStrategyonInheritanceTestCase#testValidityStrategyonInheritance
>  *   ./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=org.jboss.as.test.integration.jpa.mockprovider.classtransformer.ClassFileTransformerTestCase#test_persistenceUnitInfoURLS
>     org.jboss.as.test.integration.jpa.mockprovider.classtransformer.ClassFileTransformerTestCase#test_persistenceUnitInfoURLS



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)