[LOG4J2-2761] log4j2 fails when a whitespace is in the file path and Java security manager is used

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.13.0
• Fix Version/s: 2.13.2

Environment

Windows 7/10, Java 8/11/13 with configured Java Security Manager

• Assignee: Ralph Goers
• Reporter: Yury Molchan
• Created: 15/Jan/20 21:08
• Updated: 29/Mar/20 23:23
• Resolved: 28/Mar/20 20:00

Description

SEVERE: Error configuring application listener of class [org.yurkom.navigator.web.servlet.StartupListener]
java.security.AccessControlException: access denied ("java.io.FilePermission" "C:\My%20Space\apache-tomcat-9.0.30\webapps\navigator\WEB-INF\classes\log4j2.properties" "read")
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
        at java.security.AccessController.checkPermission(AccessController.java:884)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
        at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
        at java.io.File.exists(File.java:814)
        at org.apache.logging.log4j.core.util.FileUtils.fileFromUri(FileUtils.java:88)
        at org.apache.logging.log4j.core.config.ConfigurationSource.fromResource(ConfigurationSource.java:360)
        at org.apache.logging.log4j.core.config.ConfigurationFactory$Factory.getConfiguration(ConfigurationFactory.java:527)
        at org.apache.logging.log4j.core.config.ConfigurationFactory$Factory.getConfiguration(ConfigurationFactory.java:456)
        at org.apache.logging.log4j.core.config.ConfigurationFactory.getConfiguration(ConfigurationFactory.java:318)
        at org.apache.logging.log4j.core.LoggerContext.reconfigure(LoggerContext.java:687)
        at org.apache.logging.log4j.core.LoggerContext.reconfigure(LoggerContext.java:708)
        at org.apache.logging.log4j.core.LoggerContext.start(LoggerContext.java:263)
        at org.apache.logging.log4j.core.impl.Log4jContextFactory.getContext(Log4jContextFactory.java:153)
        at org.apache.logging.log4j.core.impl.Log4jContextFactory.getContext(Log4jContextFactory.java:45)
        at org.apache.logging.log4j.LogManager.getContext(LogManager.java:194)
        at org.apache.logging.log4j.spi.AbstractLoggerAdapter.getContext(AbstractLoggerAdapter.java:138)

policy file contains the following permissions:

grant codeBase "file:${catalina.home}/webapps/navigator/-" {
        permission java.io.FilePermission "${catalina.home}/-", "read";
        permission java.io.FilePermission "${catalina.home}/", "read";
};

where catalina.home is "C:\My Space\apache-tomcat-9.0.30"

It is related to LOG4J2-466

Issue Links

• breaks: SOLR-14362 Tests no longer run with whitespace in Solr's checkout directory
• is caused by: LOG4J2-466 Cannot load log4j2 config file if path contains plus '+' characters
• links to: GitHub Pull Request #355