Uploaded image for project: 'Red Hat Fuse'
  1. Red Hat Fuse
  2. ENTESB-6183

Enabling Java System Security and OSGi security is not working

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • fuse-7.0, fuse-6.x-GA
    • jboss-fuse-6.3
    • Karaf
    • None
    • % %
    • 7.0 Sprint 1

      When I configure Fuse to use security by the following steps:

      1. Uncomment the following in system.properties;

      java.security.policy=${karaf.home}/etc/all.policy
      org.osgi.framework.security=osgi
      org.osgi.framework.trust.repositories=${karaf.home}/etc/trustStore.ks

      2. And also uncomment the following in startup.properties:

      org/apache/felix/org.apache.felix.framework.security/2.4.0/org.apache.felix.framework.security-2.4.0.jar=1

      3. then start fuse. The following error is thrown:

      Please wait while JBoss Fuse is loading...
  3% [==>                                                                     ]Exception in thread "CM Configuration Updater" java.security.AccessControlException: access denied ("
org.osgi.framework.AdaptPermission" "org.osgi.framework.wiring.BundleRevision" "adapt")
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:366)
        at java.security.AccessController.checkPermission(AccessController.java:560)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
        at org.apache.felix.framework.BundleImpl.checkAdapt(BundleImpl.java:1058)
        at org.apache.felix.framework.BundleImpl.adapt(BundleImpl.java:1066)
        at org.ops4j.pax.logging.service.internal.PaxLoggerImpl.setDelegateContext(PaxLoggerImpl.java:102)
  4% [==>                                                                     ]Impl.java:193)
        at org.ops4j.pax.logging.service.internal.PaxLoggingServiceImpl.log(PaxLoggingServiceImpl.java:161)
        at org.ops4j.pax.logging.service.internal.PaxLoggingServiceImpl.access$000(PaxLoggingServiceImpl.java:48)
        at org.ops4j.pax.logging.service.internal.PaxLoggingServiceImpl$1ManagedPaxLoggingService.log(PaxLoggingServiceImpl.java:346)
        at org.apache.felix.cm.impl.ConfigurationManager.log(ConfigurationManager.java:1246)
        at org.apache.felix.cm.impl.UpdateThread.run(UpdateThread.java:107)
        at java.lang.Thread.run(Thread.java:722)
  6% [====>                                                                   ]Exception in thread "CM Event Dispatcher" java.security.AccessControlException: access denied ("org.o
sgi.framework.AdaptPermission" "org.osgi.framework.wiring.BundleRevision" "adapt")
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:366)
        at java.security.AccessController.checkPermission(AccessController.java:560)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
        at org.apache.felix.framework.BundleImpl.checkAdapt(BundleImpl.java:1058)
        at org.apache.felix.framework.BundleImpl.adapt(BundleImpl.java:1066)
        at org.ops4j.pax.logging.service.internal.PaxLoggerImpl.setDelegateContext(PaxLoggerImpl.java:102)
        at org.ops4j.pax.logging.service.internal.PaxLoggerImpl.error(PaxLoggerImpl.java:193)
        at org.ops4j.pax.logging.service.internal.PaxLoggingServiceImpl.log(PaxLoggingServiceImpl.java:161)
        at org.ops4j.pax.logging.service.internal.PaxLoggingServiceImpl.access$000(PaxLoggingServiceImpl.java:48)
        at org.ops4j.pax.logging.service.internal.PaxLoggingServiceImpl$1ManagedPaxLoggingService.log(PaxLoggingServiceImpl.java:346)
        at org.apache.felix.cm.impl.ConfigurationManager.log(ConfigurationManager.java:1246)
        at org.apache.felix.cm.impl.UpdateThread.run(UpdateThread.java:107)
        at java.lang.Thread.run(Thread.java:722)

      I can only reproduce this on Windows.

      https://issues.apache.org/jira/browse/KARAF-3400 looks likely to be related.

              pantinor@redhat.com Paolo Antinori
              rhn-support-sjavurek Susan Javurek
              Matej Melko Matej Melko
              Votes:
              1 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: