[DERBY-3086] The server policy needs to grant derbynet.jar more permissions so that sysinfo and drda tracing will work

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.3.1.4
• Fix Version/s: 10.3.2.1
• Component/s: Network Server
• Bug behavior facts: Regression, Security
• Assignee: Richard N. Hillegas
• Reporter: Richard N. Hillegas
• Created: 25/Sep/07 19:44
• Updated: 21/Jan/11 18:50
• Resolved: 20/Nov/07 23:54

Description

More permissions need to be granted to derbynet.jar in the server.policy file. David van Couvering reports that if you bring up the server and run the following command:

java -jar derbyrun.jar server sysinfo

then you get security exceptions as the sysinfo code, running inside the network jarball tries to read user.dir, user.home, user.name, java.home, and java.class.path.

Kathey Marsden reports that if you try to run the network server with drda tracing turned on, then you get security exceptions when the server tries to open the trace log file.

Issue Links

• relates to: DERBY-3110 server hangs after trace on command fails