You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Remy Maucherat <re...@apache.org> on 2008/01/10 23:38:32 UTC

Re: svn commit: r609294 - in /tomcat/tc6.0.x/trunk: STATUS.txt conf/catalina.policy webapps/docs/changelog.xml

On Thu, 2008-01-10 at 20:07 +0000, Mark Thomas wrote:
> Remy Maucherat wrote:
> > 
> > On my platform [Linux + IcedTea], with the new policy in place, I get an
> > error initializing a timestamp used by the FileHandler (why such a class
> > ends up using a file like this is a mystery):
> 
> Can you turn on the debugging so we can figure out which file it is. I'd 
> rather add a specific permission, or at least a limited one, rather than a 
> default read permission for java_home and every file below it (assuming 
> that is where the file it is trying to read is located).

I used java.security.debug=failure. The NPE isn't visible without it
(and nothing gets logged). I also did try adding various file
permissions, without much success.

Rémy



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: svn commit: r609294 - in /tomcat/tc6.0.x/trunk: STATUS.txt conf/catalina.policy webapps/docs/changelog.xml

Posted by Remy Maucherat <re...@apache.org>.
On Sun, 2008-01-13 at 22:38 +0000, Mark Thomas wrote:
> Remy Maucherat wrote:
> > On Fri, 2008-01-11 at 13:27 -0500, Larry Isaacs wrote:
> >>> I used java.security.debug=failure. The NPE isn't visible without it
> >>> (and nothing gets logged). I also did try adding various file
> >>> permissions, without much success.
> >>>
> >>> Rémy
> >>>
> >> If I recall correctly, the "failure" option unfortunately doesn't do
> >> anything by itself.  I believe you have to have "access" enabled before
> >> it will include any failures, i.e "java.security.debug=access,failure".
> >> There's no avoiding the huge log file. :(
> > 
> > Actually, it's quite funny since the NPEs do not occur with
> > "access,failure", and no accesses are reported as denied (but of course,
> > there's still no logging).
> 
> Hmm. Very odd. A bug in the JDK maybe?

Ok, I just found the reason: a packaging issue of my own, causing the
weird error :( Sorry for the trouble.

Rémy



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: svn commit: r609294 - in /tomcat/tc6.0.x/trunk: STATUS.txt conf/catalina.policy webapps/docs/changelog.xml

Posted by Mark Thomas <ma...@apache.org>.
Remy Maucherat wrote:
> On Fri, 2008-01-11 at 13:27 -0500, Larry Isaacs wrote:
>>> I used java.security.debug=failure. The NPE isn't visible without it
>>> (and nothing gets logged). I also did try adding various file
>>> permissions, without much success.
>>>
>>> Rémy
>>>
>> If I recall correctly, the "failure" option unfortunately doesn't do
>> anything by itself.  I believe you have to have "access" enabled before
>> it will include any failures, i.e "java.security.debug=access,failure".
>> There's no avoiding the huge log file. :(
> 
> Actually, it's quite funny since the NPEs do not occur with
> "access,failure", and no accesses are reported as denied (but of course,
> there's still no logging).

Hmm. Very odd. A bug in the JDK maybe?

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


RE: svn commit: r609294 - in /tomcat/tc6.0.x/trunk: STATUS.txt conf/catalina.policy webapps/docs/changelog.xml

Posted by Remy Maucherat <re...@apache.org>.
On Fri, 2008-01-11 at 13:27 -0500, Larry Isaacs wrote:
> > I used java.security.debug=failure. The NPE isn't visible without it
> > (and nothing gets logged). I also did try adding various file
> > permissions, without much success.
> >
> > Rémy
> >
> 
> If I recall correctly, the "failure" option unfortunately doesn't do
> anything by itself.  I believe you have to have "access" enabled before
> it will include any failures, i.e "java.security.debug=access,failure".
> There's no avoiding the huge log file. :(

Actually, it's quite funny since the NPEs do not occur with
"access,failure", and no accesses are reported as denied (but of course,
there's still no logging).

Rémy



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


RE: svn commit: r609294 - in /tomcat/tc6.0.x/trunk: STATUS.txt conf/catalina.policy webapps/docs/changelog.xml

Posted by Larry Isaacs <La...@sas.com>.
> -----Original Message-----
> From: Remy Maucherat [mailto:remm@apache.org]
> Sent: Thursday, January 10, 2008 5:39 PM
> To: Tomcat Developers List
> Subject: Re: svn commit: r609294 - in /tomcat/tc6.0.x/trunk: STATUS.txt
> conf/catalina.policy webapps/docs/changelog.xml
>
> On Thu, 2008-01-10 at 20:07 +0000, Mark Thomas wrote:
> > Remy Maucherat wrote:
> > >
> > > On my platform [Linux + IcedTea], with the new policy in place, I
> get an
> > > error initializing a timestamp used by the FileHandler (why such a
> class
> > > ends up using a file like this is a mystery):
> >
> > Can you turn on the debugging so we can figure out which file it is.
> I'd
> > rather add a specific permission, or at least a limited one, rather
> than a
> > default read permission for java_home and every file below it
> (assuming
> > that is where the file it is trying to read is located).
>
> I used java.security.debug=failure. The NPE isn't visible without it
> (and nothing gets logged). I also did try adding various file
> permissions, without much success.
>
> Rémy
>

If I recall correctly, the "failure" option unfortunately doesn't do
anything by itself.  I believe you have to have "access" enabled before
it will include any failures, i.e "java.security.debug=access,failure".
There's no avoiding the huge log file. :(

Cheers,
Larry

>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org