You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@harmony.apache.org by Paulex Yang <pa...@gmail.com> on 2006/10/25 16:10:42 UTC
[classlib][security]Re: [jira] Created: (HARMONY-1963) [classlib][security]
Harmony cannot read security policy file correctly
Any security guys can help to look at this issue? thanks in advance. I
haven't found time to looked closer to find the cause yet, but it seems
a little serious.
Paulex Yang (JIRA) wrote:
> [classlib][security] Harmony cannot read security policy file correctly
> -----------------------------------------------------------------------
>
> Key: HARMONY-1963
> URL: http://issues.apache.org/jira/browse/HARMONY-1963
> Project: Harmony
> Issue Type: Bug
> Components: Classlib
> Environment: Harmony classlib + IBM VME, windows XP+sp2
> Reporter: Paulex Yang
>
>
> I created simple a java.policy file[1], and try to run SecurityManagerTest with argument:
>
> -Djava.security.manager -Dtest.bin.dir=<path to test bin directory> -Djava.security.policy=<path to policy file>
>
> public class SecurityManagerTest {
> public static void main(String[] args) throws Exception{
> System.out.println(System.getProperty("os.name")); //read access for this property has been granted by default policy
> System.out.println(System.getProperty("notexist")); // no access for this property has been granted by default policy
> }
> }
>
> RI prints:
> Windows XP
> null
>
> Harmony prints:
> Windows XP
> K0319java.security.AccessControlException: Access denied (java.util.PropertyPermission notexist read)
> at java.security.AccessController.checkPermission(AccessController.java:94)
> at java.lang.SecurityManager.checkPermission(SecurityManager.java:739)
> at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:374)
> at java.lang.System.getProperty(System.java:675)
> at java.lang.System.getProperty(System.java:660)
> at SecurityManagerTest.main(Unknown Source)
>
> I got same results if add the content customized java.policy to default policy file without specifying policy file in cmd line.
>
> [1]
> grant codeBase "file:${test.bin.dir}/-" {
> permission java.security.AllPermission;
> };
>
>
>
--
Paulex Yang
China Software Development Lab
IBM
Re: [classlib][security]Re: [jira] Created: (HARMONY-1963) [classlib][security] Harmony cannot read security policy file correctly
Posted by Boris Kuznetsov <bo...@gmail.com>.
I'll take a look.
thanks,
Boris
On 10/25/06, Paulex Yang <pa...@gmail.com> wrote:
> Any security guys can help to look at this issue? thanks in advance. I
> haven't found time to looked closer to find the cause yet, but it seems
> a little serious.
>
> Paulex Yang (JIRA) wrote:
> > [classlib][security] Harmony cannot read security policy file correctly
> > -----------------------------------------------------------------------
> >
> > Key: HARMONY-1963
> > URL: http://issues.apache.org/jira/browse/HARMONY-1963
> > Project: Harmony
> > Issue Type: Bug
> > Components: Classlib
> > Environment: Harmony classlib + IBM VME, windows XP+sp2
> > Reporter: Paulex Yang
> >
> >
> > I created simple a java.policy file[1], and try to run SecurityManagerTest with argument:
> >
> > -Djava.security.manager -Dtest.bin.dir=<path to test bin directory> -Djava.security.policy=<path to policy file>
> >
> > public class SecurityManagerTest {
> > public static void main(String[] args) throws Exception{
> > System.out.println(System.getProperty("os.name")); //read access for this property has been granted by default policy
> > System.out.println(System.getProperty("notexist")); // no access for this property has been granted by default policy
> > }
> > }
> >
> > RI prints:
> > Windows XP
> > null
> >
> > Harmony prints:
> > Windows XP
> > K0319java.security.AccessControlException: Access denied (java.util.PropertyPermission notexist read)
> > at java.security.AccessController.checkPermission(AccessController.java:94)
> > at java.lang.SecurityManager.checkPermission(SecurityManager.java:739)
> > at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:374)
> > at java.lang.System.getProperty(System.java:675)
> > at java.lang.System.getProperty(System.java:660)
> > at SecurityManagerTest.main(Unknown Source)
> >
> > I got same results if add the content customized java.policy to default policy file without specifying policy file in cmd line.
> >
> > [1]
> > grant codeBase "file:${test.bin.dir}/-" {
> > permission java.security.AllPermission;
> > };
> >
> >
> >
>
>
> --
> Paulex Yang
> China Software Development Lab
> IBM
>
>
--
Best regards,
Boris Kuznetsov
Intel Middleware Products Division