Bug 1347835
| Summary: | The security manager doesn't work correctly (JSPs cannot be compiled) | |||
|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Coty Sutherland <csutherl> | |
| Component: | tomcat | Assignee: | Coty Sutherland <csutherl> | |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | |
| Severity: | unspecified | Docs Contact: | ||
| Priority: | unspecified | |||
| Version: | 23 | CC: | alee, coolsvap, csutherl, ivan.afonichev, java-sig-commits, krzysztof.daniel, tomcat-qe, trick | |
| Target Milestone: | --- | |||
| Target Release: | --- | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | tomcat-8.0.36-2.fc25 tomcat-8.0.36-2.fc24 tomcat-8.0.36-2.fc23 | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | 1347774 | |||
| : | 1347838 (view as bug list) | Environment: | ||
| Last Closed: | 2016-09-01 13:38:25 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 927930, 1347774 | |||
| Bug Blocks: | 1347778, 1347838 | |||
|
Description
Coty Sutherland
2016-06-17 18:53:25 UTC
In order to get this to work I added the following to my catalina.policy to allow access to the /usr/share/java jars that the symlinks point to:
+++
grant codeBase "file:/usr/share/java/apache-commons-collections.jar" {
permission java.security.AllPermission;
};
grant codeBase "file:/usr/share/java/apache-commons-dbcp.jar" {
permission java.security.AllPermission;
};
grant codeBase "file:/usr/share/java/apache-commons-pool.jar" {
permission java.security.AllPermission;
};
grant codeBase "file:/usr/share/java/ecj.jar" {
permission java.security.AllPermission;
};
grant codeBase "file:/usr/share/java/tomcat-el-3.0-api.jar" {
permission java.security.AllPermission;
};
grant codeBase "file:/usr/share/java/tomcat-jsp-2.3-api.jar" {
permission java.security.AllPermission;
};
grant codeBase "file:/usr/share/java/tomcat-servlet-3.1-api.jar" {
permission java.security.AllPermission;
};
+++
Adding this and restarting resolves the issue and allows JSPs to compile again.
tomcat-8.0.36-2.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2016-0a4dccdd23 tomcat-8.0.36-2.fc24 has been submitted as an update to Fedora 24. https://bodhi.fedoraproject.org/updates/FEDORA-2016-2b0c16fd82 tomcat-8.0.36-2.fc25 has been submitted as an update to Fedora 25. https://bodhi.fedoraproject.org/updates/FEDORA-2016-f4a443888b tomcat-8.0.36-2.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-f4a443888b tomcat-8.0.36-2.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-0a4dccdd23 tomcat-8.0.36-2.fc24 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-2b0c16fd82 tomcat-8.0.36-2.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report. tomcat-8.0.36-2.fc24 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report. tomcat-8.0.36-2.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report. |