quality@glassfish.java.net

Re: Hudson X Security Manager

From: Judy Tang <Judy.J.Tang_at_Sun.COM>
Date: Tue, 10 Nov 2009 14:41:12 -0800

Hi Felipe,

Looks you still see issues with Security on in promote build b71. If
this is the case,
please help us file bugs. Thanks a lot !

Judy
Felipe Gaścho wrote:
> * Hudson suggest tha user to disable the security manager all over its
> documentation, what is kind of weird IMO ...
>
> but ok, I modified the granted.policy to unleash Hudson from the
> security manager and I got the same Class Loader exception as before:
>
> java.security.AccessControlException: access denied
> (java.lang.RuntimePermission createClassLoader)
>
>
> My Hudson grant policy:
>
>
> /* AUTOMATICALLY GENERATED ON Tue Nov 10 19:20:20 CET 2009*/
> /* DO NOT EDIT */
>
> grant {
> permission javax.security.jacc.WebUserDataPermission "/loginEntry";
> permission javax.security.jacc.WebUserDataPermission "/:/loginEntry";
> permission javax.security.jacc.WebResourcePermission "/:/loginEntry";
> };
>
> grant codeBase "file:/home/fgaucho/dev/glassfishv3/glassfish/domains/domain1/applications/hudson/-"
> {
> permission java.security.AllPermission;
> };
>
> grant codeBase "file:/home/fgaucho/dev/glassfishv3/glassfish/domains/domain1/generated/jsp/hudson/-"
> {
> permission java.security.AllPermission;
> };
>
>
>
> What else should I do to run Hudson in a secure Glassfish ?
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: quality-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: quality-help_at_glassfish.dev.java.net
>
>