[JBEAP-4061] BeanFactoryTestCase fails with security manager

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 7.1.0.DR16
Affects Version/s: 7.0.0.ER7
Component/s: POJO, Test Suite
Labels:
None

CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

7.1.0.GA

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

org.jboss.as.test.integration.pojo.test.BeanFactoryTestCase

./integration-tests.sh -DtestLogToFile=false -Dts.noSmoke -Dts.basic -Dtest=org.jboss.as.test.integration.pojo.test.BeanFactoryTestCase -Dsecurity.manager

Fails with:

Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.lang.RuntimePermission" "getClassLoader")" in code source "(vfs:/content/bean-factory.jar <no signer certificates>)" of "null")
	at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:273)
	at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175)
	at org.jboss.modules.Module.getClassLoader(Module.java:421)
	at org.jboss.as.pojo.descriptor.BaseBeanFactory.create(BaseBeanFactory.java:44)
	... 19 more

blocks

JBEAP-971 Fix issues in tests with Security Manager

Closed

clones

WFLY-6473 BeanFactoryTestCase fails with security manager

Closed

is blocked by

WFCORE-2593 DeploymentReflectionIndex requires additional permissions even if it is guarded by ServerPermission("createDeploymentReflectionIndex")

Resolved

Jan Tymel (Inactive) added a comment - 2017/04/13 5:58 AM

Verified in 7.1.0.DR16

Jan Tymel (Inactive) added a comment - 2017/04/13 5:58 AM Verified in 7.1.0.DR16

Jan Tymel (Inactive) added a comment - 2016/07/26 6:31 AM

Verification failed in 7.1.0.DR1.

The new output is:

ERROR [org.jboss.msc.service.fail] (MSC service thread 1-4) MSC000001: Failed to start service jboss.pojo.D.CREATE: org.jboss.msc.service.StartException in service jboss.pojo.D.CREATE: java.lang.reflect.InvocationTargetException
	at org.jboss.as.pojo.service.LifecyclePojoPhase.startInternal(LifecyclePojoPhase.java:51)
	at org.jboss.as.pojo.service.AbstractPojoPhase.start(AbstractPojoPhase.java:75)
	at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1948)
	at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1881)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
	at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.reflect.InvocationTargetException
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at org.jboss.as.pojo.service.MethodJoinpoint.dispatch(MethodJoinpoint.java:41)
	at org.jboss.as.pojo.service.BeanUtils.dispatchLifecycleJoinpoint(BeanUtils.java:155)
	at org.jboss.as.pojo.service.LifecyclePojoPhase.dispatchJoinpoint(LifecyclePojoPhase.java:43)
	at org.jboss.as.pojo.service.LifecyclePojoPhase.startInternal(LifecyclePojoPhase.java:49)
	... 6 more
Caused by: java.lang.reflect.InvocationTargetException
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at org.jboss.as.test.integration.pojo.support.D.create(D.java:36)
	... 14 more
Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("org.jboss.as.server.security.ServerPermission" "createDeploymentReflectionIndex")" in code source "(vfs:/content/bean-factory.jar <no signer certificates>)" of "null")
	at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:273)
	at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175)
	at org.jboss.as.server.deployment.reflect.DeploymentReflectionIndex.create(DeploymentReflectionIndex.java:50)
	at org.jboss.as.pojo.descriptor.BaseBeanFactory.create(BaseBeanFactory.java:45)
	... 19 more

Jan Tymel (Inactive) added a comment - 2016/07/26 6:31 AM Verification failed in 7.1.0.DR1. The new output is: ERROR [org.jboss.msc.service.fail] (MSC service thread 1-4) MSC000001: Failed to start service jboss.pojo.D.CREATE: org.jboss.msc.service.StartException in service jboss.pojo.D.CREATE: java.lang.reflect.InvocationTargetException at org.jboss.as.pojo.service.LifecyclePojoPhase.startInternal(LifecyclePojoPhase.java:51) at org.jboss.as.pojo.service.AbstractPojoPhase.start(AbstractPojoPhase.java:75) at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1948) at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1881) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang. Thread .run( Thread .java:745) Caused by: java.lang.reflect.InvocationTargetException at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.jboss.as.pojo.service.MethodJoinpoint.dispatch(MethodJoinpoint.java:41) at org.jboss.as.pojo.service.BeanUtils.dispatchLifecycleJoinpoint(BeanUtils.java:155) at org.jboss.as.pojo.service.LifecyclePojoPhase.dispatchJoinpoint(LifecyclePojoPhase.java:43) at org.jboss.as.pojo.service.LifecyclePojoPhase.startInternal(LifecyclePojoPhase.java:49) ... 6 more Caused by: java.lang.reflect.InvocationTargetException at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.jboss.as.test.integration.pojo.support.D.create(D.java:36) ... 14 more Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "(" org.jboss.as.server.security.ServerPermission " " createDeploymentReflectionIndex ")" in code source "(vfs:/content/bean-factory.jar <no signer certificates>)" of " null " ) at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:273) at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175) at org.jboss.as.server.deployment.reflect.DeploymentReflectionIndex.create(DeploymentReflectionIndex.java:50) at org.jboss.as.pojo.descriptor.BaseBeanFactory.create(BaseBeanFactory.java:45) ... 19 more

Hynek Švábek (Inactive) added a comment - 2016/04/20 4:45 AM - edited

I added there these permissions

new RuntimePermission("getClassLoader"),
ServerPermission.CREATE_DEPLOYMENT_REFLECTION_INDEX

but I am still getting this exception

Caused by: java.lang.Exception: {"WFLYCTL0080: Failed services" => {"jboss.pojo.D.CREATE" => "org.jboss.msc.service.StartException in service jboss.pojo.D.CREATE: java.lang.reflect.InvocationTargetException
    Caused by: java.lang.reflect.InvocationTargetException
    Caused by: java.lang.reflect.InvocationTargetException
    Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission \"(\"org.jboss.as.server.security.ServerPermission\" \"createDeploymentReflectionIndex\")\" in code source \"(vfs:/content/bean-factory.jar <no signer certificates>)\" of \"null\")"}}
        at org.jboss.as.controller.client.helpers.standalone.impl.ServerDeploymentPlanResultFuture.getActionResult(ServerDeploymentPlanResultFuture.java:134)
        at org.jboss.as.controller.client.helpers.standalone.impl.ServerDeploymentPlanResultFuture.getResultFromNode(ServerDeploymentPlanResultFuture.java:123)
        at org.jboss.as.controller.client.helpers.standalone.impl.ServerDeploymentPlanResultFuture.get(ServerDeploymentPlanResultFuture.java:85)
        at org.jboss.as.controller.client.helpers.standalone.impl.ServerDeploymentPlanResultFuture.get(ServerDeploymentPlanResultFuture.java:42)
        at org.jboss.as.controller.client.helpers.standalone.ServerDeploymentHelper.deploy(ServerDeploymentHelper.java:55)

Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("org.jboss.as.server.security.ServerPermission" "createDeploymentReflectionIndex")" in code source "(vfs:/content/bean-factory.jar <no signer certificates>)" of "null")
	at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:273)
	at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175)
	at org.jboss.as.server.deployment.reflect.DeploymentReflectionIndex.create(DeploymentReflectionIndex.java:50)
	at org.jboss.as.pojo.descriptor.BaseBeanFactory.create(BaseBeanFactory.java:45)
	... 19 more

It seems to me as a problem outside of TS.

Hynek Švábek (Inactive) added a comment - 2016/04/20 4:45 AM - edited I added there these permissions new RuntimePermission( "getClassLoader" ), ServerPermission.CREATE_DEPLOYMENT_REFLECTION_INDEX but I am still getting this exception Caused by: java.lang.Exception: { "WFLYCTL0080: Failed services" => { "jboss.pojo.D.CREATE" => "org.jboss.msc.service.StartException in service jboss.pojo.D.CREATE: java.lang.reflect.InvocationTargetException Caused by: java.lang.reflect.InvocationTargetException Caused by: java.lang.reflect.InvocationTargetException Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission \ "(\" org.jboss.as.server.security.ServerPermission\ " \" createDeploymentReflectionIndex\ ")\" in code source \ "(vfs:/content/bean-factory.jar <no signer certificates>)\" of \ " null \" )"}} at org.jboss.as.controller.client.helpers.standalone.impl.ServerDeploymentPlanResultFuture.getActionResult(ServerDeploymentPlanResultFuture.java:134) at org.jboss.as.controller.client.helpers.standalone.impl.ServerDeploymentPlanResultFuture.getResultFromNode(ServerDeploymentPlanResultFuture.java:123) at org.jboss.as.controller.client.helpers.standalone.impl.ServerDeploymentPlanResultFuture.get(ServerDeploymentPlanResultFuture.java:85) at org.jboss.as.controller.client.helpers.standalone.impl.ServerDeploymentPlanResultFuture.get(ServerDeploymentPlanResultFuture.java:42) at org.jboss.as.controller.client.helpers.standalone.ServerDeploymentHelper.deploy(ServerDeploymentHelper.java:55) Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "(" org.jboss.as.server.security.ServerPermission " " createDeploymentReflectionIndex ")" in code source "(vfs:/content/bean-factory.jar <no signer certificates>)" of " null " ) at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:273) at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175) at org.jboss.as.server.deployment.reflect.DeploymentReflectionIndex.create(DeploymentReflectionIndex.java:50) at org.jboss.as.pojo.descriptor.BaseBeanFactory.create(BaseBeanFactory.java:45) ... 19 more It seems to me as a problem outside of TS.

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

Collapse comment: Jan Tymel (Inactive) added a comment - 2017/04/13 5:58 AM

Expand comment: Jan Tymel (Inactive) added a comment - 2017/04/13 5:58 AM

Collapse comment: Jan Tymel (Inactive) added a comment - 2016/07/26 6:31 AM

Expand comment: Jan Tymel (Inactive) added a comment - 2016/07/26 6:31 AM

Collapse comment: Hynek Švábek (Inactive) added a comment - 2016/04/20 4:45 AM, Edited by Hynek Švábek - 2016/04/20 6:37 AM

Expand comment: Hynek Švábek (Inactive) added a comment - 2016/04/20 4:45 AM, Edited by Hynek Švábek - 2016/04/20 6:37 AM

People

Dates