Best unofficial Apache Server developers community

Answers

Java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.misc)

⇧

⇩

66 views

hi fellas , so my hosting company changed their service to tomcat 7 with security manager, and from that time on i am getting this exception every time my application tries to connect to mysql database (with hibernate). i dont know what to do, they ask me for my tomcat permissions, but i have not defined anything special :-?

so can any one help me?

this is my stack trace :

type Exception report

message description The server encountered an internal error () that prevented it from fulfilling this request. Stacktrace: org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:505) org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:416) org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:342) org.apache.jasper.servlet.JspServlet.service(JspServlet.java:267) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) sun.reflect.GeneratedMethodAccessor134.invoke(Unknown Source) sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) java.lang.reflect.Method.invoke(Method.java:597) org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:269) java.security.AccessController.doPrivileged(Native Method) javax.security.auth.Subject.doAsPrivileged(Subject.java:517) org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:301) org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162) root cause

java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.misc) java.security.AccessControlContext.checkPermission(AccessControlContext.java:323) java.security.AccessController.checkPermission(AccessController.java:546) java.lang.SecurityManager.checkPermission(SecurityManager.java:532) java.lang.SecurityManager.checkPackageAccess(SecurityManager.java:1512) sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:298) java.lang.ClassLoader.loadClass(ClassLoader.java:248) org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1302) org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1233) java.lang.ClassLoader.loadClassInternal(ClassLoader.java:316) ir.omicc.utilBox.PasswordService.encrypt(PasswordService.java:29) ir.omicc.classes.loginFactory.doLogin(loginFactory.java:17) org.apache.jsp.loginValidate_jsp._jspService(loginValidate_jsp.java:76) org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:374) org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:342) org.apache.jasper.servlet.JspServlet.service(JspServlet.java:267) javax.servlet.http.HttpServlet.service(HttpServlet.java:717) sun.reflect.GeneratedMethodAccessor134.invoke(Unknown Source) sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) java.lang.reflect.Method.invoke(Method.java:597) org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:269) java.security.AccessController.doPrivileged(Native Method) javax.security.auth.Subject.doAsPrivileged(Subject.java:517) org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:301) org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)

java mysql hibernate jsp tomcat

asked May 30, 2011 3:32 am CDT

dave

posted via StackOverflow

3 Answers

Newest Most Voted

⇧

⇩

It seems that the class ir.omicc.utilBox.PasswordService tries to use some class in the sun.misc package. If this class is one of your classes, then you should reimplement it without accessing the sun.misc classes. If not, then ask the developer/company who implemented this class to fix it. Using sun.misc classes is a very bad practice, which has always been discouraged.

answered May 30, 2011 4:23 am CDT

JB Nizet

⇧

⇩

There's a problem in your tomcat security configuration. Check if exists in ${catalina.home}/conf/catalina.policy the following lines :

grant {

    // Precompiled JSPs need access to this package.
    permission java.lang.RuntimePermission "accessClassInPackage.sun.misc";
    permission java.lang.RuntimePermission "accessClassInPackage.sun.misc.*";
};

and add in ${catalina.home}/conf/policy.d/03.catalina.policy

// The permissions granted to your jar (ir.omicc ??)
grant codeBase "file:/path/to/the/ir.omicc.utilBox/your.jar" {
  permission java.security.AllPermission;
};

it's a workaround but it's not secure.

answered May 30, 2011 4:23 am CDT

EricParis16

⇧

⇩

I asssume the stack trace has been edited. You now need to grant your codebase the following permission:

java.util.PropertyPermission "hibernate.enable_specj_proprietary_syntax", "read";

or more probably "hibernate.*", "read, write";

answered May 31, 2011 3:17 am CDT

EJP

Your answer

Similar discussion threads

java.lang.RuntimePermission accessClassInPackage.org.apache.catalina
August 9, 2010 12:25:23 PM
Hi: Gurus I am having the following exception when I try to fire Tomcat with -security option with JAAS Realm. java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.org.apache.catalina) I am…

Closed: (DERBY-3866) access denied (java.lang.RuntimePermission charsetProvider) in LocalizedDisplay
February 24, 2011 02:29:25 AM
[ https://issues.apache.org/jira/browse/DERBY-3866?page=com.atlassian.ji ra.plugin.system.issuetabpanels:all-tabpanel ] Myrna van Lunteren closed DERBY-3866.

Commented: (DERBY-3866) access denied (java.lang.RuntimePermission charsetProvider) in LocalizedDisp
February 24, 2011 02:51:27 AM
[ https://issues.apache.org/jira/browse/DERBY-3866?page=com.atlassian.ji ra.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId= 12998758#comment-12998758 ] Myrna van Lunteren commented on DERBY-3866:

Tomcat5.5: java.io.FilePermission access denied
October 1, 2010 11:21:52 AM
Tomcat5.5: java.io.FilePermission access denied: When I added the code on 02-08 it fixed the SocketPermission and PropertyPermission exceptions for my servlets. What am I doing wrong that I now get FilePermission exceptions. I have changed Linux…

Re: Tomcat 5.5: java.io.FilePermission read access denied to logging.properties
September 15, 2010 05:25:11 PM
This is a multi-part message in MIME format.On 14/09/2010 23:35, André Warnier wrote: > Pid wrote: >> On 14/09/2010 16:17, Steve Ryder wrote: >>> java.security.AccessControlException: access denied >>>…

java.lang.RuntimeException: java.lang.Double cannot be cast to java.lang.String
September 30, 2010 10:47:19 AM
Hello, I got the following exception when I made a simple query in my table. I made the table to store email header data with the following command: CREATE TABLE mytable (xfrom STRING, xto STRING, subject STRING, cc STRING, xgeoip STRING,…

JMS message to Weblogic -> Security Exception (Access denied to resource)
July 19, 2010 04:06:51 AM
Howdi, I'm trying to access a JMS Queue in a secure WebLogic JMS module using ActiveMQ & Camel. I have tried using the UserCredentialsConnectionFactoryAdapter as per JIRA (CAMEL-246), but with no success. I keep on getting the following…

svn commit: r1043099 - in /tomcat/trunk/java/org/apache/el: lang/ELArithmetic.java lang/ELSupport.ja
December 7, 2010 09:38:38 AM
Author: markt Date: Tue Dec 7 15:38:06 2010 New Revision: 1043099 URL: http://svn.apache.org/viewvc?rev=1043099&view=rev Log: Fix modifier order in org.apache.el.* Modified: tomcat/trunk/java/org/apache/el/lang/ELArithmetic.java …

svn commit: r1050660 - in /tomcat/trunk/java/org/apache/el/lang: ELArithmetic.java ELSupport.java Ex
December 18, 2010 10:24:07 AM
Author: markt Date: Sat Dec 18 16:23:09 2010 New Revision: 1050660 URL: http://svn.apache.org/viewvc?rev=1050660&view=rev Log: Fix most of the Java, Findbugs and unused code warnings in this package Modified: …

svn commit: r1022623 - in /tomcat/trunk: java/javax/el/BeanELResolver.java java/org/apache/el/lang/E
October 14, 2010 12:38:40 PM
Author: markt Date: Thu Oct 14 17:37:20 2010 New Revision: 1022623 URL: http://svn.apache.org/viewvc?rev=1022623&view=rev Log: Enhance fix for https://issues.apache.org/bugzilla/show_bug.cgi?id=50078 Make cache sizes configurable Modified: …

Reopened: (GERONIMO-5259) Annoying "access denied" security exceptions for oenwebbeans whi
July 14, 2010 01:04:50 PM
[ https://issues.apache.org/jira/browse/GERONIMO-5259?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] YING WANG reopened GERONIMO-5259:

Updated: (GERONIMO-5259) Annoying "access denied" security exceptions for oenwebbeans whil
July 29, 2010 09:02:16 PM
[ https://issues.apache.org/jira/browse/GERONIMO-5259?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] YING WANG updated GERONIMO-5259:

Updated: (GERONIMO-5259) Annoying "access denied" security exceptions for oenwebbeans whil
December 3, 2010 03:06:39 PM
[ https://issues.apache.org/jira/browse/GERONIMO-5259?page=com.atlassian .jira.plugin.system.issuetabpanels:all-tabpanel ] Jarek Gawor updated GERONIMO-5259:

Closed] (GERONIMO-5924) Servlet.service() for servlet WARModules threw exception java.lang.Security
May 12, 2011 03:32:53 AM
[ https://issues.apache.org/jira/browse/GERONIMO-5924?page=com.atlassian .jira.plugin.system.issuetabpanels:all-tabpanel ] Tina Li closed GERONIMO-5924.

can't run jmeter on Ubuntu 10.04.1? error = java.lang.Throwable: Could not access /usr/share/jmeter/
October 13, 2010 06:39:19 PM
after typing "jmeter" at the command line I followed the instructions and did: sudo apt-get install jmeter Here''s the install output: > Reading package lists... Done > Building dependency tree > Reading state information... Done…

Created: (DERBY-5030) "index-stat-thread" java.lang.NullPointerException at store.access.
February 11, 2011 06:16:20 PM
"index-stat-thread" java.lang.NullPointerException at store.access.btree.ControlRow.getControlRowForPage in suites.All

svn commit: r950905 - in /tomcat/trunk/java/org/apache: catalina/security/SecurityClassLoad.java coy
June 3, 2010 02:56:24 AM
Author: markt Date: Thu Jun 3 07:56:23 2010 New Revision: 950905 URL: http://svn.apache.org/viewvc?rev=950905&view=rev Log: Clean up FastHttpDateFormat initialisation when using a security manager as prompted by Konstantin Modified: …

svn commit: r954429 - /tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java
June 14, 2010 07:32:32 AM
Author: markt Date: Mon Jun 14 12:32:32 2010 New Revision: 954429 URL: http://svn.apache.org/viewvc?rev=954429&view=rev Log: Previous cleanup missed one string Modified: …

svn commit: r954427 - /tomcat/trunk/java/org/apache/catalina/security/SecurityClassLoad.java
June 14, 2010 07:29:03 AM
Author: markt Date: Mon Jun 14 12:29:03 2010 New Revision: 954427 URL: http://svn.apache.org/viewvc?rev=954427&view=rev Log: Cleanup. Make consistent, remove duplication, correct names. Modified: …

svn commit: r981448 - in /tomcat/trunk: java/org/apache/catalina/security/SecurityClassLoad.java web
August 2, 2010 05:50:31 AM
Author: markt Date: Mon Aug 2 10:49:06 2010 New Revision: 981448 URL: http://svn.apache.org/viewvc?rev=981448&view=rev Log: Fix running with a security manager Modified: …

Questions and Answers are licensed under cc-wiki license.

Java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.misc)

3 Answers

Your answer

Join with account you already have