Liferay 7 and PACL

[7年前 に J G によって更新されました。]

Hi,

If I start liferay ,l I see in the log file the following:

Plugin security management is not enabled. Enable a security manager, then restart.

Neverthess I (thoughy) I enabled PACL via
portal.security.manager.strategy=liferay

Why do I see in my log that no security manager is enabled?

Best,

JG

[7年前 に Montej Shah によって更新されました。]

You need to enable the java secuirty by addding this line in the tomcat/bin/setenv.sh

"-Djava.security.manager -Djava.security.policy=$CATALINA_BASE/conf/catalina.policy"

So the final file look like below.

CATALINA_OPTS="$CATALINA_OPTS -Djava.security.manager -Djava.security.policy=$CATALINA_BASE/conf/catalina.policy -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack=true -Dorg.apache.catalina.loader.WebappClassLoader.ENABLE_CLEAR_REFERENCES=false -Duser.timezone=GMT -Xms1024m -Xmx4096m -XX:MaxPermSize=1024m"

[7年前 に Montej Shah によって更新されました。]

Although after on the JAVA security manager and enable PACL.
It will give me the error of the stackoverflow as below

Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=1024m; support was removed in 8.0
25-Oct-2016 05:47:35.483 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version: Apache Tomcat/8.0.32
25-Oct-2016 05:47:35.484 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server built: Feb 2 2016 19:34:53 UTC
25-Oct-2016 05:47:35.484 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server number: 8.0.32.0
25-Oct-2016 05:47:35.484 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Name: Linux
25-Oct-2016 05:47:35.484 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Version: 3.13.0-24-generic
25-Oct-2016 05:47:35.484 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Architecture: amd64
25-Oct-2016 05:47:35.484 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Java Home: /opt/java/jdk1.8.0_51/jre
25-Oct-2016 05:47:35.485 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Version: 1.8.0_51-b16
25-Oct-2016 05:47:35.485 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Vendor: Oracle Corporation
25-Oct-2016 05:47:35.485 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_BASE: /home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32
25-Oct-2016 05:47:35.485 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_HOME: /home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32
25-Oct-2016 05:47:35.485 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.config.file=/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32/conf/logging.properties
25-Oct-2016 05:47:35.485 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
25-Oct-2016 05:47:35.485 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.security.manager
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.security.policy=/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32/conf/catalina.policy
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dfile.encoding=UTF8
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.net.preferIPv4Stack=true
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.loader.WebappClassLoader.ENABLE_CLEAR_REFERENCES=false
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Duser.timezone=GMT
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Xms1024m
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Xmx4096m
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -XX:MaxPermSize=1024m
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.endorsed.dirs=/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32/endorsed
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.security.manager
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.security.policy==/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32/conf/catalina.policy
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.base=/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32
25-Oct-2016 05:47:35.486 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.home=/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32
25-Oct-2016 05:47:35.487 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.io.tmpdir=/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32/temp
25-Oct-2016 05:47:35.487 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: /usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib
25-Oct-2016 05:47:35.597 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8080"]
25-Oct-2016 05:47:35.608 INFO [main] org.apache.tomcat.util.net.NioSelectorPool.getSharedSelector Using a shared selector for servlet write/read
25-Oct-2016 05:47:35.610 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["ajp-nio-8009"]
25-Oct-2016 05:47:35.612 INFO [main] org.apache.tomcat.util.net.NioSelectorPool.getSharedSelector Using a shared selector for servlet write/read
25-Oct-2016 05:47:35.612 INFO [main] org.apache.catalina.startup.Catalina.load Initialization processed in 401 ms
25-Oct-2016 05:47:35.630 INFO [main] org.apache.catalina.core.StandardService.startInternal Starting service Catalina
25-Oct-2016 05:47:35.630 INFO [main] org.apache.catalina.core.StandardEngine.startInternal Starting Servlet Engine: Apache Tomcat/8.0.32
25-Oct-2016 05:47:35.637 INFO [localhost-startStop-1] org.apache.catalina.startup.HostConfig.deployDescriptor Deploying configuration descriptor /home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32/conf/Catalina/localhost/ROOT.xml
25-Oct-2016 05:47:42.153 INFO [localhost-startStop-1] org.apache.catalina.core.ApplicationContext.log No Spring WebApplicationInitializer types detected on classpath
Loading jar:file:/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32/webapps/ROOT/WEB-INF/lib/portal-impl.jar!/system.properties
Loading jar:file:/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32/webapps/ROOT/WEB-INF/lib/portal-impl.jar!/system.properties
Loading jar:file:/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/tomcat-8.0.32/webapps/ROOT/WEB-INF/lib/portal-impl.jar!/portal.properties
Loading file:/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/portal-ext.properties
Loading file:/home/aspire109/Projects/Portal-Adevertisement/liferay-portal-7-ga3/portal-setup-wizard.properties
Exception in thread "AsyncFileHandlerWriter-789451787" java.lang.StackOverflowError
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:361)
at com.liferay.portal.module.framework.ModuleFrameworkClassLoader.loadClass(ModuleFrameworkClassLoader.java:95)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:290)
at sun.misc.URLClassPath.check(URLClassPath.java:607)
at sun.misc.URLClassPath$JarLoader.checkResource(URLClassPath.java:924)
at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:1007)
at sun.misc.URLClassPath.getResource(URLClassPath.java:212)
at sun.misc.URLClassPath.getResource(URLClassPath.java:265)
at java.lang.ClassLoader.getBootstrapResource(ClassLoader.java:1261)
at java.lang.ClassLoader.getResource(ClassLoader.java:1090)
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1217)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at com.liferay.portal.module.framework.ModuleFrameworkClassLoader.loadClass(ModuleFrameworkClassLoader.java:98)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:290)
at sun.misc.URLClassPath.check(URLClassPath.java:607)
at sun.misc.URLClassPath$JarLoader.checkResource(URLClassPath.java:924)
at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:1007)
at sun.misc.URLClassPath.getResource(URLClassPath.java:212)
at sun.misc.URLClassPath.getResource(URLClassPath.java:265)
at java.lang.ClassLoader.getBootstrapResource(ClassLoader.java:1261)
at java.lang.ClassLoader.getResource(ClassLoader.java:1090)
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1217)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at com.liferay.portal.module.framework.ModuleFrameworkClassLoader.loadClass(ModuleFrameworkClassLoader.java:98)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:290)
at sun.misc.URLClassPath.check(URLClassPath.java:607)
at sun.misc.URLClassPath$JarLoader.checkResource(URLClassPath.java:924)
at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:1007)
at sun.misc.URLClassPath.getResource(URLClassPath.java:212)
at sun.misc.URLClassPath.getResource(URLClassPath.java:265)
at java.lang.ClassLoader.getBootstrapResource(ClassLoader.java:1261)
at java.lang.ClassLoader.getResource(ClassLoader.java:1090)
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1217)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at com.liferay.portal.module.framework.ModuleFrameworkClassLoader.loadClass(ModuleFrameworkClassLoader.java:98)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:290)
at sun.misc.URLClassPath.check(URLClassPath.java:607)
at sun.misc.URLClassPath$JarLoader.checkResource(URLClassPath.java:924)
at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:1007)
at sun.misc.URLClassPath.getResource(URLClassPath.java:212)
at sun.misc.URLClassPath.getResource(URLClassPath.java:265)
at java.lang.ClassLoader.getBootstrapResource(ClassLoader.java:1261)
at java.lang.ClassLoader.getResource(ClassLoader.java:1090)
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1217)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at com.liferay.portal.module.framework.ModuleFrameworkClassLoader.loadClass(ModuleFrameworkClassLoader.java:98)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:290)
at sun.misc.URLClassPath.check(URLClassPath.java:607)
at sun.misc.URLClassPath$JarLoader.checkResource(URLClassPath.java:924)
at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:1007)
at sun.misc.URLClassPath.getResource(URLClassPath.java:212)
at sun.misc.URLClassPath.getResource(URLClassPath.java:265)
at java.lang.ClassLoader.getBootstrapResource(ClassLoader.java:1261)
at java.lang.ClassLoader.getResource(ClassLoader.java:1090)
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1217)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at com.liferay.portal.module.framework.ModuleFrameworkClassLoader.loadClass(ModuleFrameworkClassLoader.java:98)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:290)
at sun.misc.URLClassPath.check(URLClassPath.java:607)
at sun.misc.URLClassPath$JarLoader.checkResource(URLClassPath.java:924)
at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:1007)
at sun.misc.URLClassPath.getResource(URLClassPath.java:212)
at sun.misc.URLClassPath.getResource(URLClassPath.java:265)
at java.lang.ClassLoader.getBootstrapResource(ClassLoader.java:1261)
at java.lang.ClassLoader.getResource(ClassLoader.java:1090)
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1217)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at com.liferay.portal.module.framework.ModuleFrameworkClassLoader.loadClass(ModuleFrameworkClassLoader.java:98)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:290)
at sun.misc.URLClassPath.check(URLClassPath.java:607)
at sun.misc.URLClassPath$JarLoader.checkResource(URLClassPath.java:924)
at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:1007)
at sun.misc.URLClassPath.getResource(URLClassPath.java:212)
at sun.misc.URLClassPath.getResource(URLClassPath.java:265)
at java.lang.ClassLoader.getBootstrapResource(ClassLoader.java:1261)
at java.lang.ClassLoader.getResource(ClassLoader.java:1090)
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1217)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at com.liferay.portal.module.framework.ModuleFrameworkClassLoader.loadClass(ModuleFrameworkClassLoader.java:98)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:290)
at sun.misc.URLClassPath.check(URLClassPath.java:607)
at sun.misc.URLClassPath$JarLoader.checkResource(URLClassPath.java:924)
at sun.misc.URLClassPath$JarLoader.getResource(URLClassPath.java:1007)
at sun.misc.URLClassPath.getResource(URLClassPath.java:212)
at sun.misc.URLClassPath.getResource(URLClassPath.java:265)
at java.lang.ClassLoader.getBootstrapResource(ClassLoader.java:1261)
at java.lang.ClassLoader.getResource(ClassLoader.java:1090)
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1217)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at java.lang.ClassLoader.loadClass(ClassLoader.java:411)
at com.liferay.portal.module.framework.ModuleFrameworkClassLoader.loadClass(ModuleFrameworkClassLoader.java:98)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:290)
at sun.misc.URLClassPath.check(URLClassPath.java:607)

Any one have solution to this issue ?

[7年前 に J G によって更新されました。]

Any solution found for this. I still get an error.

[6年前 に Jorge Díaz によって更新されました。]

Seems to be a known bug, see: LPS-65321