Uploaded image for project: 'WildFly Core'
  1. WildFly Core
  2. WFCORE-5715

Fix permission check failures that occur in the properties realm with the security manager enabled

    XMLWordPrintable

Details

    Description

      WFCORE-5650 (https://github.com/wildfly/wildfly-core/pull/4821) updated the Elytron properties realm to check the last modified time of the properties files to see if they need to be reloaded.

      This has resulted in a bunch of WildFly test failures when the security manager is enabled, e.g.,

      java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.io.FilePermission" "/store/work/tc-work/f5da3564a57e9d74/testsuite/integration/basic/target/wildfly/standalone/configuration/application-users.properties" "read")" in code source "(vfs:/content/ejb3-singleton-security.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.ejb3-singleton-security.jar" from Service Module Loader")
        at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:309)
        at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:201)
        at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
        at org.wildfly.security.manager.WildFlySecurityManager.checkRead(WildFlySecurityManager.java:374)
        at java.io.File.lastModified(File.java:949)
        at org.wildfly.extension.elytron.PropertiesRealmDefinition$RealmWrapper.reloadIfNeeded(PropertiesRealmDefinition.java:383)
        at org.wildfly.extension.elytron.PropertiesRealmDefinition$RealmWrapper.getRealmIdentity(PropertiesRealmDefinition.java:337)
        at org.wildfly.security.auth.server.ServerAuthenticationContext.assignName(ServerAuthenticationContext.java:1223)
      

      Attachments

        Issue Links

          Activity

            People

              fjuma1@redhat.com Farah Juma
              fjuma1@redhat.com Farah Juma
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: