Wildfly 10.1.0 error when trying to use the security manager

[adrian.boangiu]

I am trying to migrate an application, let’s say myappl.war, from JBoss AS 7.1.1 to WildFly 10.1.0. I am able to deploy successfully the application if I do not enable the security.

When I enable the security by adding –DSECMGR=true in the command line the application is still deployed successfully.

As soon as I add the following permissions.xml (or jboss-permissions.xml) file in the folder META-INF of the appl.war

<?xml version="1.0" encoding="UTF-8"?>

<permissions>

    <permission>

        <classname>java.security.AllPermission</classname>

    </permission>

</permissions>

I get a strange error and the application is not deployed:

15:06:44,586 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-7) MSC000001: Failed to start service jboss.deployment.unit."myappl.war".PARSE: org.j

1. boss.msc.service.StartException in service jboss.deployment.unit."myappl.war".PARSE: WFLYSRV0153: Failed to process phase PARSE of deployment "myappl.war"

    Caused by: org.jboss.as.server.deployment.DeploymentUnitProcessingException: ParseError at [row,col]:[3,1]

Message: Missing required attribute(s): VERSION

    Caused by: javax.xml.stream.XMLStreamException: ParseError at [row,col]:[3,1]

Message: Missing required attribute(s): VERSION"},

    "WFLYCTL0412: Required services that are not installed:" => ["jboss.deployment.unit.\"myappl.war\".PARSE"],

    "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined

}

15:06:44,903 ERROR [org.jboss.as] (Controller Boot Thread) WFLYSRV0026: WildFly Full 10.1.0.Final (WildFly Core 2.2.0.Final) started (with errors) in 17734

ms - Started 915 of 1178 services (1 services failed or missing dependencies, 428 services are lazy, passive or on-demand)

I am following the guidelines in Using the Java Security Manager in Enterprise Application Platform 7 - Red Hat Customer Portal and I do not know where is my mistake. Please help me.

Thank you,

[adrian.boangiu]

I have found the error by comparing my permissions.xml file with this one

https://github.com/wildfly/wildfly/blob/master/testsuite/integration/basic/src/test/java/org/jboss/as/test/integration/ejb/container/interceptor/security/permissions.xml

In this file the permissions tag is:

<permissions xmlns="http://xmlns.jcp.org/xml/ns/javaee"

                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

                    xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee

                    http://xmlns.jcp.org/xml/ns/javaee/permissions_7.xsd"

                    version="7">

Another problem with my file is that the classname tag should be instead class-name.

Perhaps it would be a good idea to correct the example given in the paragraph “5.2.2. Defining Policies in the Deployment” at https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-7.0/how-to-configure-server-security/#java_security_manager

[mchoma]

I have created the JIRA on document [JBEAP-5913] Wrong permissions.xml example - JBoss Issue Tracker