-
1. Re: System.getProperties() in a security restricted environm
ovidiu.feodorov Feb 9, 2007 4:46 AM (in response to ovidiu.feodorov)If the client runs in a security restricted environment that denies System.getProperty(), being prevented to get properties such as "jboss.messaging.callback.bind.address" is the least of our worries, because log4j won't be able to get things like "line.separator" and it will throw exception long before we attempt to get the bind address.
-
2. Re: System.getProperties() in a security restricted environm
ovidiu.feodorov Feb 9, 2007 4:47 AM (in response to ovidiu.feodorov)I have extended the framework created by Tim to experiment and write tests in a security restricted environment, but I will push http://jira.jboss.org/jira/browse/JBMESSAGING-806 to SP5 until we reach a conclusion here.
-
3. Re: System.getProperties() in a security restricted environm
timfox Feb 9, 2007 5:49 AM (in response to ovidiu.feodorov)"ovidiu.feodorov@jboss.com" wrote:
If the client runs in a security restricted environment that denies System.getProperty(), being prevented to get properties such as "jboss.messaging.callback.bind.address" is the least of our worries, because log4j won't be able to get things like "line.separator" and it will throw exception long before we attempt to get the bind address.
Not nceessarily. You can deny/allow access to individual properties in the security manager config. Something like log4j is so widely and well known used that it's conceivable they allow access, but not the same for our properties. -
4. Re: System.getProperties() in a security restricted environm
ovidiu.feodorov Feb 9, 2007 5:55 AM (in response to ovidiu.feodorov)Right.
My point is that is difficult to draw the line and test for that.
What is certain is that 806 won't make it in SP4. -
5. Re: System.getProperties() in a security restricted environm
timfox Feb 9, 2007 6:09 AM (in response to ovidiu.feodorov)What we should do is try and get hold of the security manager config that jnlp runs in and test against that for one thing.
Although I don't know where to find that. -
6. Re: System.getProperties() in a security restricted environm
ovidiu.feodorov Feb 9, 2007 6:11 AM (in response to ovidiu.feodorov)Any volunteer?