Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-23624

(7.4.z) WFCORE-5715 - Fix permission check failures that occur in the properties realm with the security manager enabled

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Obsolete
    • Icon: Major Major
    • None
    • None
    • Security
    • None

      WFCORE-5650 (https://github.com/wildfly/wildfly-core/pull/4821) updated the Elytron properties realm to check the last modified time of the properties files to see if they need to be reloaded.

      This has resulted in a bunch of WildFly test failures when the security manager is enabled, e.g.,

      java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.io.FilePermission" "/store/work/tc-work/f5da3564a57e9d74/testsuite/integration/basic/target/wildfly/standalone/configuration/application-users.properties" "read")" in code source "(vfs:/content/ejb3-singleton-security.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.ejb3-singleton-security.jar" from Service Module Loader")
        at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:309)
        at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:201)
        at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
        at org.wildfly.security.manager.WildFlySecurityManager.checkRead(WildFlySecurityManager.java:374)
        at java.io.File.lastModified(File.java:949)
        at org.wildfly.extension.elytron.PropertiesRealmDefinition$RealmWrapper.reloadIfNeeded(PropertiesRealmDefinition.java:383)
        at org.wildfly.extension.elytron.PropertiesRealmDefinition$RealmWrapper.getRealmIdentity(PropertiesRealmDefinition.java:337)
        at org.wildfly.security.auth.server.ServerAuthenticationContext.assignName(ServerAuthenticationContext.java:1223)
      

              rhn-support-ivassile Ilia Vassilev
              rhn-support-ivassile Ilia Vassilev
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: