[TOMEE-3840] TomEE WebProfile 8.0.9 does not start with security enabled

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 8.0.9
• Fix Version/s: 8.0.11
• Component/s: TomEE Core Server
• Labels: catalina.policy
• Environment: Linux 5.10.0-8-amd64 #1 SMP Debian 5.10.46-4 (2021-08-03) x86_64 GNU/Linux
• Assignee: Richard Zowalla
• Reporter: Rene Bangemann
• Created: 16/Feb/22 09:31
• Updated: 17/Feb/22 07:34
• Resolved: 16/Feb/22 10:53

Description

Start TomEE via "catalina.sh start -security"

The start of TomEE fails with the following exception:

NOTE: Picked up JDK_JAVA_OPTIONS:  --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/ja
va.util.concurrent=ALL-UNNAMED --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
Exception in thread "main" java.lang.ExceptionInInitializerError
Caused by: org.apache.juli.logging.LogConfigurationException: java.lang.reflect.InvocationTargetException
        at org.apache.juli.logging.LogFactory.getInstance(LogFactory.java:139)
        at org.apache.juli.logging.LogFactory.getInstance(LogFactory.java:156)
        at org.apache.juli.logging.LogFactory.getLog(LogFactory.java:211)
        at org.apache.catalina.startup.Bootstrap.<clinit>(Bootstrap.java:50)
Caused by: java.lang.reflect.InvocationTargetException
        at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
        at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
        at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
        at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490)
        at org.apache.juli.logging.LogFactory.getInstance(LogFactory.java:137)
        ... 3 more
Caused by: java.security.AccessControlException: access denied ("java.util.PropertyPermission" "tomee.skip-tomcat-log" "read")
        at java.base/java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
        at java.base/java.security.AccessController.checkPermission(AccessController.java:897)
        at java.base/java.lang.SecurityManager.checkPermission(SecurityManager.java:322)
        at java.base/java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1066)
        at java.base/java.lang.System.getProperty(System.java:816)
        at java.base/java.lang.Boolean.getBoolean(Boolean.java:265)
        at org.apache.tomee.jul.formatter.log.TomEELog.initialize(TomEELog.java:33)
        at org.apache.tomee.jul.formatter.log.TomEELog.<init>(TomEELog.java:78)
        ... 8 more

 

Issue Links

• is related to: TOMEE-3843 TomEE WebProfile 9.0.0-M7 does not start with security enabled