[jboss-jira] [JBoss JIRA] (WFCORE-1266) Incorreclty bypass the SecurityManager and call AccessControl.checkPermission() directly

[Brian Stansberry (JIRA)]

     [ https://issues.jboss.org/browse/WFCORE-1266?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brian Stansberry updated WFCORE-1266:
-------------------------------------
    Git Pull Request: https://github.com/wildfly/wildfly-core/pull/1340


> Incorreclty bypass the SecurityManager and call AccessControl.checkPermission() directly
> ----------------------------------------------------------------------------------------
>
>                 Key: WFCORE-1266
>                 URL: https://issues.jboss.org/browse/WFCORE-1266
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Server
>    Affects Versions: 2.0.5.Final
>            Reporter: Jason Shepherd
>            Assignee: Jason Shepherd
>
> If we modify jboss-modules to remove the allPermissions by default, then change the WildflySecurityManager to avoid throwing exceptions, we get this error when starting Wildfly:
> {code}
>  org.jboss.msc.service.StartException in service jboss.as: Failed to start service
>          at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1904)
>          at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
>          at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
>          at java.lang.Thread.run(Thread.java:745)
>  Caused by: java.security.AccessControlException: access denied ("org.jboss.as.server.security.ServerPermission" "setCurrentServiceContainer")
>          at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
>          at java.security.AccessController.checkPermission(AccessController.java:884)
>          at org.jboss.as.server.CurrentServiceContainer.checkPermission(CurrentServiceContainer.java:63)
>          at org.jboss.as.server.CurrentServiceContainer.setServiceContainer(CurrentServiceContainer.java:56)
>          at org.jboss.as.server.ApplicationServerService.start(ApplicationServerService.java:137)
>          at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1948)
>          at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1881)
>          ... 3 more
> {code}



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)