[SSHD-332] Nio2 & security

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.11.0
• Fix Version/s: 0.12.0
• Environment: Oracle Java 8
• Assignee: Guillaume Nodet
• Reporter: Gaël Lalire
• Created: 21/Jun/14 16:54
• Updated: 09/Jul/14 13:20
• Resolved: 09/Jul/14 13:05

Description

I don't know if it is a JVM bug or normal behavior but a ProtectionDomain with no permission is associated with completionHandler thread by sun.misc.InnocuousThread class.
As a result if a security manager is set all code in completionHandler has no permission (event if policy grants all permission).

If the behavior of JVM is correct then you should add AccessController.doPrivileged() when entering completionHandler.

You can also check if a SecurityManager is set and run without Nio2 as a quick fix.