[JBEAP-823] WildFlySecurityManager throws exception by some tests with security manager

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 7.1.0.DR6
Affects Version/s: 7.0.0.DR8, 7.0.0.ER4
Component/s: Test Suite
Labels:
None

CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

7.backlog.GA
Git Pull Request:
https://github.com/jbossas/jboss-eap7/pull/100

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Description of problem:
WildFlySecurityManager throws ExceptionInInitializerError exception by some tests with security manager.

Affected tests found so far:

~~org.jboss.as.test.integration.batch.deployment.JobControlTestCase#testStop~~ ~~JBEAP-821~~
org.jboss.as.test.integration.ejb.mdb.ejb2x.MDB20MessageSelectorTestCase#retestMessageSelectors
org.jboss.as.test.integration.ejb.mdb.ejb2x.MDB20QueueTestCase#testEjb20MDB
org.jboss.as.test.integration.ejb.mdb.ejb2x.MDB20TopicTestCase#testEjb20TopicMDBs
org.jboss.as.test.integration.ejb.mdb.ejb2x.MDB21TestCase#testSimple21MDB
org.jboss.as.test.integration.ejb.pool.lifecycle.PooledEJBLifecycleTestCase#testMDB
org.jboss.as.test.xts.annotation.compensationScoped.CompensationScopedTestCase#shouldSeeDifferentValuesInDifferentTransactions
org.jboss.as.test.xts.wsat.client.ATTestCase#testWSATVoteReadOnly
org.jboss.as.test.xts.wsba.coordinatorcompletion.client.BACoordinatorCompletionTestCase#testWSBACoordinatorSimple

Steps to Reproduce for MDB20QueueTestCase:

./integration-tests.sh -fae -Dmaven.test.failure.ignore=true -Dnode0=$MYTESTIP_1 -Dnode1=$MYTESTIP_2 -DfailIfNoTests=false -Dsecurity.manager -Dts.basic -Dts.noSmoke -Dtest=MDB20QueueTestCase

Actual results:

testEjb20MDB(org.jboss.as.test.integration.ejb.mdb.ejb2x.MDB20QueueTestCase)  Time elapsed: 0.094 sec  <<< ERROR!
java.lang.ExceptionInInitializerError: null
	at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:273)
	at org.wildfly.security.manager.WildFlySecurityManager.checkPropertyAccess(WildFlySecurityManager.java:496)
	at java.lang.System.getProperty(System.java:717)
	at java.lang.Integer.getInteger(Integer.java:1101)
	at java.lang.Integer.getInteger(Integer.java:1057)
	at org.jboss.as.test.shared.TimeoutUtil.<clinit>(TimeoutUtil.java:39)
	at org.jboss.as.test.integration.ejb.mdb.ejb2x.MDB20QueueTestCase.testEjb20MDB(MDB20QueueTestCase.java:110)

blocks

JBEAP-971 Fix issues in tests with Security Manager

Closed

is blocked by

JBEAP-2275 JNDIPermission is based in a private module

Closed

JBEAP-2240 Upgrade MSC from 1.2.6.Final-redhat-1 to 1.2.7.Final

Verified

is cloned by

WFLY-5170 WildFlySecurityManager throws exception by some tests with security manager

Closed

Ondrej Kotek added a comment - 2016/10/05 6:11 AM

Verified in 7.1.0.DR6

Ondrej Kotek added a comment - 2016/10/05 6:11 AM Verified in 7.1.0.DR6

Petr Kremensky (Inactive) added a comment - 2016/10/04 8:06 AM

~~JBEAP-2240~~ was moved to QA in DR6, moving this one as well.

Petr Kremensky (Inactive) added a comment - 2016/10/04 8:06 AM JBEAP-2240 was moved to QA in DR6, moving this one as well.

Ondrej Kotek added a comment - 2016/09/21 7:05 AM

Still waiting for ~~JBEAP-2240~~.

Ondrej Kotek added a comment - 2016/09/21 7:05 AM Still waiting for JBEAP-2240 .

Jiri Pallich added a comment - 2016/07/13 12:44 PM

Moving from 7.0.0.GA to 7.backlog.

Jiri Pallich added a comment - 2016/07/13 12:44 PM Moving from 7.0.0.GA to 7.backlog.

Ivo Studensky added a comment - 2016/05/10 3:19 AM

Please reopen this only if it really fails once upgraded. Thanks.
Till that time this issue should stay in Resolved state.

Ivo Studensky added a comment - 2016/05/10 3:19 AM Please reopen this only if it really fails once upgraded. Thanks. Till that time this issue should stay in Resolved state.

Jan Tymel (Inactive) added a comment - 2016/04/27 5:04 AM - edited

org.jboss.as.test.integration.naming.remote.ejb.RemoteNamingEjbTestCase#testDeploymentBinding still fails in 7.0.0.CR2, since this version still uses MSC version 1.2.6.Final. (See ~~JBEAP-2240~~)

The test fails with:

Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.lang.RuntimePermission" "getClassLoader")" in code source "(vfs:/content/test.jar <no signer certificates>)" of "null")
	at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:273)
	at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175)
	at java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:1525)
	at java.lang.Class.getClassLoader(Class.java:683)
	at org.jboss.msc.service.ServiceControllerImpl.invokeListener(ServiceControllerImpl.java:1529)
	at org.jboss.msc.service.ServiceControllerImpl.access$2800(ServiceControllerImpl.java:51)
	at org.jboss.msc.service.ServiceControllerImpl$ListenerTask.run(ServiceControllerImpl.java:2099)
	at org.jboss.msc.service.ServiceControllerImpl.commitInstallation(ServiceControllerImpl.java:265)
	at org.jboss.msc.service.ServiceContainerImpl.install(ServiceContainerImpl.java:771)
	at org.jboss.msc.service.ServiceTargetImpl.install(ServiceTargetImpl.java:223)
	at org.jboss.msc.service.ServiceControllerImpl$ChildServiceTarget.install(ServiceControllerImpl.java:2401)
	at org.jboss.msc.service.ServiceBuilderImpl.install(ServiceBuilderImpl.java:317)
	at org.jboss.as.naming.WritableServiceBasedNamingStore.bind(WritableServiceBasedNamingStore.java:86)
	... 82 more

Jan Tymel (Inactive) added a comment - 2016/04/27 5:04 AM - edited org.jboss.as.test.integration.naming.remote.ejb.RemoteNamingEjbTestCase#testDeploymentBinding still fails in 7.0.0.CR2, since this version still uses MSC version 1.2.6.Final. (See JBEAP-2240 ) The test fails with: Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "(" java.lang.RuntimePermission " " getClassLoader ")" in code source "(vfs:/content/test.jar <no signer certificates>)" of " null " ) at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:273) at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175) at java.lang. ClassLoader .checkClassLoaderPermission( ClassLoader .java:1525) at java.lang. Class .getClassLoader( Class .java:683) at org.jboss.msc.service.ServiceControllerImpl.invokeListener(ServiceControllerImpl.java:1529) at org.jboss.msc.service.ServiceControllerImpl.access$2800(ServiceControllerImpl.java:51) at org.jboss.msc.service.ServiceControllerImpl$ListenerTask.run(ServiceControllerImpl.java:2099) at org.jboss.msc.service.ServiceControllerImpl.commitInstallation(ServiceControllerImpl.java:265) at org.jboss.msc.service.ServiceContainerImpl.install(ServiceContainerImpl.java:771) at org.jboss.msc.service.ServiceTargetImpl.install(ServiceTargetImpl.java:223) at org.jboss.msc.service.ServiceControllerImpl$ChildServiceTarget.install(ServiceControllerImpl.java:2401) at org.jboss.msc.service.ServiceBuilderImpl.install(ServiceBuilderImpl.java:317) at org.jboss.as.naming.WritableServiceBasedNamingStore.bind(WritableServiceBasedNamingStore.java:86) ... 82 more

Ivo Studensky added a comment - 2016/04/13 8:04 AM

JndiPermission is now based in a org.wildfly.naming module instead of org.wildfly.naming.client. And the org.wildfly.naming module is the default dependency of EE deployment, hence it does not need any explicit dependency in meta-inf on it.

Ivo Studensky added a comment - 2016/04/13 8:04 AM JndiPermission is now based in a org.wildfly.naming module instead of org.wildfly.naming.client. And the org.wildfly.naming module is the default dependency of EE deployment, hence it does not need any explicit dependency in meta-inf on it.

Jan Tymel (Inactive) added a comment - 2016/03/31 4:45 AM

Putting this on hold since ~~JBEAP-2240~~ should resolve missing RuntimePermission("getClassLoader") issue. The missing dependency on naming module should be added anyway.

Jan Tymel (Inactive) added a comment - 2016/03/31 4:45 AM Putting this on hold since JBEAP-2240 should resolve missing RuntimePermission("getClassLoader") issue. The missing dependency on naming module should be added anyway.

Hynek Švábek (Inactive) added a comment - 2016/02/02 7:12 AM

To fix test:
add dependency: org.wildfly.naming.client
add new RuntimePermission("getClassLoader") to permissions.xml

Hynek Švábek (Inactive) added a comment - 2016/02/02 7:12 AM To fix test: add dependency: org.wildfly.naming.client add new RuntimePermission("getClassLoader") to permissions.xml

Ivo Studensky added a comment - 2016/01/18 8:26 AM

okotek@redhat.com JndiPermission issue is covered by ~~JBEAP-2275~~. It is not possible to depend on a private module.

Ivo Studensky added a comment - 2016/01/18 8:26 AM okotek@redhat.com JndiPermission issue is covered by JBEAP-2275 . It is not possible to depend on a private module.

Assignee:: Ivo Studensky

Reporter:: Marek Kopecky

Tester:: Ondrej Kotek

QA Contact:: Ondrej Kotek

Votes:: 0 Vote for this issue

Watchers:: 6 Start watching this issue

Created:: 2015/08/21 10:51 AM

Updated:: 2021/10/24 5:46 AM

Resolved:: 2016/05/10 3:19 AM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

Collapse comment: Ondrej Kotek added a comment - 2016/10/05 6:11 AM

Expand comment: Ondrej Kotek added a comment - 2016/10/05 6:11 AM

Collapse comment: Petr Kremensky (Inactive) added a comment - 2016/10/04 8:06 AM

Expand comment: Petr Kremensky (Inactive) added a comment - 2016/10/04 8:06 AM

Collapse comment: Ondrej Kotek added a comment - 2016/09/21 7:05 AM

Expand comment: Ondrej Kotek added a comment - 2016/09/21 7:05 AM

Collapse comment: Jiri Pallich added a comment - 2016/07/13 12:44 PM

Expand comment: Jiri Pallich added a comment - 2016/07/13 12:44 PM

Collapse comment: Ivo Studensky added a comment - 2016/05/10 3:19 AM

Expand comment: Ivo Studensky added a comment - 2016/05/10 3:19 AM

Collapse comment: Jan Tymel (Inactive) added a comment - 2016/04/27 5:04 AM, Edited by Jan Tymel - 2016/04/27 5:54 AM

Expand comment: Jan Tymel (Inactive) added a comment - 2016/04/27 5:04 AM, Edited by Jan Tymel - 2016/04/27 5:54 AM

Collapse comment: Ivo Studensky added a comment - 2016/04/13 8:04 AM

Expand comment: Ivo Studensky added a comment - 2016/04/13 8:04 AM

Collapse comment: Jan Tymel (Inactive) added a comment - 2016/03/31 4:45 AM

Expand comment: Jan Tymel (Inactive) added a comment - 2016/03/31 4:45 AM

Collapse comment: Hynek Švábek (Inactive) added a comment - 2016/02/02 7:12 AM

Expand comment: Hynek Švábek (Inactive) added a comment - 2016/02/02 7:12 AM

Collapse comment: Ivo Studensky added a comment - 2016/01/18 8:26 AM

Expand comment: Ivo Studensky added a comment - 2016/01/18 8:26 AM

People

Dates