You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2011/07/05 07:37:09 UTC

DO NOT REPLY [Bug 51473] New: SecurityConfig，set "package.definition" security property to "nullsun.,java.,..."

https://issues.apache.org/bugzilla/show_bug.cgi?id=51473

             Bug #: 51473
           Summary: SecurityConfig，set "package.definition" security
                    property to "nullsun.,java.,..."
           Product: Tomcat 7
           Version: 7.0.16
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Catalina
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: zhh200910@gmail.com
    Classification: Unclassified


Created attachment 27251
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=27251
eclipse debug

In method "org.apache.catalina.security.SecurityConfig.setSecurityProperty"，
when i enable the SecurityManager，
if 'properties' var equals "package.definition",
Security.getProperty(properties) will return null,

so

Security.setProperty(properties, definition + packageList); 

will be

Security.setProperty("package.definition", null + packageList); 

BTW:

"package.access" security property no problem。


my jdk:
java version "1.6.0_20"
Java(TM) SE Runtime Environment (build 1.6.0_20-b02)
Java HotSpot(TM) Client VM (build 16.3-b01, mixed mode, sharing)

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 51473] SecurityConfig，set "package.definition" security property to "nullsun.,java.,..."

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51473

Konstantin Kolinko <kn...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|Catalina                    |Catalina
            Version|7.0.16                      |5.5.33
            Product|Tomcat 7                    |Tomcat 5

--- Comment #2 from Konstantin Kolinko <kn...@gmail.com> 2011-07-05 07:14:01 UTC ---
Fixed in Tomcat 7 - will be in 7.0.18.
Proposed for 6.0 and 5.5.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 51473] SecurityConfig，set "package.definition" security property to "nullsun.,java.,..."

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51473

--- Comment #1 from zhh <zh...@gmail.com> 2011-07-05 05:39:50 UTC ---
Created attachment 27252
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=27252
eclipse debug 2

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 51473] SecurityConfig，set "package.definition" security property to "nullsun.,java.,..."

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51473

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #4 from Mark Thomas <ma...@apache.org> 2011-08-12 08:22:17 UTC ---
This has been fixed in 5.5.x and will be included in 5.5.34 onwards.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 51473] SecurityConfig，set "package.definition" security property to "nullsun.,java.,..."

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51473

--- Comment #3 from Mark Thomas <ma...@apache.org> 2011-07-21 16:18:17 UTC ---
Fixed in 6.0.x and included in 6.0.33 onwards.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org