LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 03-18-2008, 07:03 PM   #1
DavidMcCann
LQ Veteran
 
Registered: Jul 2006
Location: London
Distribution: PCLinuxOS, Debian
Posts: 6,131

Rep: Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302
Java security configuration


Having failed to get Sun's Java to work, I successfully installed Fedora's Iced Tea substitute and even the Sun website accepted it as Java. But, when I tried to use it to access a remote database I got the following:

java.security.AccessControlException: access denied
(java.net.SocketPermission appserve.londonlibrary.co.uk resolve)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:342)
at java.security.AccessController.checkPermission(AccessController.java:556)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:550)
at java.lang.SecurityManager.checkConnect(SecurityManager.java:1049)
at java.net.InetAddress.getAllByName0(InetAddress.java:1192)
at java.net.InetAddress.getAllByName0(InetAddress.java:1173)
at java.net.InetAddress.getAllByName(InetAddress.java:1120)
at com.citrix.client.io.net.ip.s.a(Unknown Source)
at com.citrix.client.io.net.ip.s.a(Unknown Source)
at com.citrix.client.module.td.tcp.TCPTransportDriver.t(Unknown Source)
at com.citrix.client.module.td.TransportDriver.run(Unknown Source)
at java.lang.Thread.run(Thread.java:675)

This is all Greek to me. Googling revealed that Iced Tea's security is "probably too strict" but not what to do about it. There seem to be about twenty document files on Java on my computer: that is more than I really want to know or have time to deal with.

Is there any quick and simple way to get the JRE Security Manager to access the Citrix server?
 
Old 03-19-2008, 08:18 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Code:
cat << EOC  > $java.policy
 grant codeBase "http://appserve.londonlibrary.co.uk" {
 permission java.security.AllPermission;
}
EOC
 
Old 03-19-2008, 12:43 PM   #3
DavidMcCann
LQ Veteran
 
Registered: Jul 2006
Location: London
Distribution: PCLinuxOS, Debian
Posts: 6,131

Original Poster
Rep: Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302
I've just tried that and I'm still getting exactly the same error message.
 
Old 03-19-2008, 01:16 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
And if you remove the "codeBase "http://appserve.londonlibrary.co.uk"" part?
 
Old 03-20-2008, 01:36 PM   #5
DavidMcCann
LQ Veteran
 
Registered: Jul 2006
Location: London
Distribution: PCLinuxOS, Debian
Posts: 6,131

Original Poster
Rep: Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302Reputation: 2302
You mean just use

cat << EOC > $java.policy
{permission java.security.AllPermission;}
EOC

No luck. It's almost enough to drive a man to Windows.

The answer!
The command-line trick doesn't work because the code

grant codeBase {
permission java.security.AllPermission;
};

can only be inserted into the file java.policy by editing it. That solves the problem.

Last edited by DavidMcCann; 04-04-2008 at 05:34 PM. Reason: Addition
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
SELinux Security Level Configuration modernsaint Linux - Security 2 12-10-2007 01:21 AM
security sshd with better file configuration huanvnn Linux - Security 5 06-04-2006 05:36 AM
System Security Configuration Problem Fatality Linux - Security 1 12-07-2005 09:36 AM
Slackware configuration files for security baskerville Linux - Security 4 07-19-2005 02:32 PM
Slackware Security Configuration Tool odin123 Slackware 3 11-11-2003 10:40 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 02:57 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration