quality@glassfish.java.net

Hudson X Security Manager

From: Felipe Gaścho <fgaucho_at_gmail.com>
Date: Tue, 10 Nov 2009 19:33:51 +0100

* Hudson suggest tha user to disable the security manager all over its
documentation, what is kind of weird IMO ...

but ok, I modified the granted.policy to unleash Hudson from the
security manager and I got the same Class Loader exception as before:

java.security.AccessControlException: access denied
(java.lang.RuntimePermission createClassLoader)


My Hudson grant policy:


/* AUTOMATICALLY GENERATED ON Tue Nov 10 19:20:20 CET 2009*/
/* DO NOT EDIT */

grant {
  permission javax.security.jacc.WebUserDataPermission "/loginEntry";
  permission javax.security.jacc.WebUserDataPermission "/:/loginEntry";
  permission javax.security.jacc.WebResourcePermission "/:/loginEntry";
};

grant codeBase "file:/home/fgaucho/dev/glassfishv3/glassfish/domains/domain1/applications/hudson/-"
{
        permission java.security.AllPermission;
};

grant codeBase "file:/home/fgaucho/dev/glassfishv3/glassfish/domains/domain1/generated/jsp/hudson/-"
{
        permission java.security.AllPermission;
};



What else should I do to run Hudson in a secure Glassfish ?