hi,
I tried to enable PACL on Liferay 6.1 GA3 bundled with Tomcat, so:
- I've added permission java.security.AllPermission; into catalina.policy
- added "portal.security.manager.strategy=liferay" into portal-ext.properties
- started tomcat with -security flag
but my liferay is not starting now.
Here some parts of stack trace during starup:
1org.apache.catalina.startup.HostConfig deployDirectory
2INFO: Deploying web application directory D:\liferay-portal-6.1.2-ce-ga3\tomcat-7.0.40\webapps\portal-compat-hook
3 at java.security.AccessController.doPrivileged(Native Method)
4 at java.io.FilePermission.init(FilePermission.java:209)
5 at java.io.FilePermission.<init>(FilePermission.java:285)
6 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
7 at java.io.File.isDirectory(File.java:838)
8 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
9 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
10 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
11 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
12 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
13 at java.security.AccessController.doPrivileged(Native Method)
14 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
15 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
16 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
17 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
18 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
19 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
20 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
21 at java.security.AccessController.checkPermission(AccessController.java:559)
22 at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
23 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
24 at java.io.File.isDirectory(File.java:838)
25 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
26 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
27 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
28 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
29 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
30 at java.security.AccessController.doPrivileged(Native Method)
31 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
32 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
33 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
34 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
35 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
36 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
37 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
38 at java.security.AccessController.checkPermission(AccessController.java:559)
39 at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
40 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
41 at java.io.File.isDirectory(File.java:838)
42 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
43 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
44 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
45 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
46 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
47 at java.security.AccessController.doPrivileged(Native Method)
48 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
49 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
50 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
51 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
52 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
53 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
54 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
55 at java.security.AccessController.checkPermission(AccessController.java:559)
56 at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
57 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
58 at java.io.File.isDirectory(File.java:838)
59 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
60 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
61 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
62 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
63 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
64 at java.security.AccessController.doPrivileged(Native Method)
65 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
66 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
67 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
68 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
69 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
70sty 25, 2014 10:48:12 PM org.apache.catalina.startup.HostConfig deployDirectory
71INFO: Deploying web application directory D:\programy\liferay-portal-6.1.2-ce-ga3\tomcat-7.0.40\webapps\resources-importer-web
72 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
73 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
74 at java.security.AccessController.checkPermission(AccessController.java:559)
75 at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
76 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
77 at java.io.File.isDirectory(File.java:838)
78 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
79 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
80 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
81 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
82 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
83 at java.security.AccessController.doPrivileged(Native Method)
84 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
85 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
86 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
87 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
88 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
89 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
90 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
91 at java.security.AccessController.checkPermission(AccessController.java:559)
92 at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
93 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
94 at java.io.File.isDirectory(File.java:838)
95 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
96 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
97 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
98 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
99 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
100 at java.security.AccessController.doPrivileged(Native Method)
101 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
102 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
103 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
104 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
105 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
106 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
107 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
108sty 25, 2014 10:48:12 PM org.apache.catalina.startup.HostConfig deployDirectory
109INFO: Deploying web application directory D:\programy\liferay-portal-6.1.2-ce-ga3\tomcat-7.0.40\webapps\welcome-theme
110 at java.security.AccessController.checkPermission(AccessController.java:559)
111 at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
112 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
113 at java.io.File.isDirectory(File.java:838)
114 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
115 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
116 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
117 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
118 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
119 at java.security.AccessController.doPrivileged(Native Method)
120 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
121 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
122 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
123 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
124 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
125 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
126 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
127 at java.security.AccessController.checkPermission(AccessController.java:559)
128 at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
129 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
130 at java.io.File.isDirectory(File.java:838)
131 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
132 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
133 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
134 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
135 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
136 at java.security.AccessController.doPrivileged(Native Method)
137 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
138 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
139 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
140 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
141 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
142 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
143 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
144 at java.security.AccessController.checkPermission(AccessController.java:559)
145 at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
146 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
147 at java.io.File.isDirectory(File.java:838)
148 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
149 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
150 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
151 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
152 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
153 at java.security.AccessController.doPrivileged(Native Method)
154 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
155 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
156 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
157 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
158 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
159 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
160 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
161 at java.security.AccessController.checkPermission(AccessController.java:559)
162 at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
163 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
164 at java.io.File.isDirectory(File.java:838)
165 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
166 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
167 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
168 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
169 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
170 at java.security.AccessController.doPrivileged(Native Method)
171 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
172 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
173 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
174 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
175 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
176 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
177 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
178 at java.security.AccessController.checkPermission(AccessController.java:559)
179 at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
180 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
181 at java.io.File.isDirectory(File.java:838)
182 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
183 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
184 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
185 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
186 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
187 at java.security.AccessController.doPrivileged(Native Method)
188 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
189 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
190 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
191 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
192 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
193 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
194 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
195 at java.security.AccessController.checkPermission(AccessController.java:559)
196 at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
197 at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
198 at java.io.File.isDirectory(File.java:838)
199 at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
200 at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
201 at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
202 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
203 at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
204 at java.security.AccessController.doPrivileged(Native Method)
205 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
206 at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
207 at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
208 at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
209 at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
210 at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
211 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
212
213
Do you have any suggestions how to enable PACL? What am I doing wrong:?
kind regards
