Developer Portal

Rank: Youngling

Posts: 0

Join Date: January 30, 2011

hi,

I tried to enable PACL on Liferay 6.1 GA3 bundled with Tomcat, so:

I've added permission java.security.AllPermission; into catalina.policy
added "portal.security.manager.strategy=liferay" into portal-ext.properties
started tomcat with -security flag

but my liferay is not starting now.

Here some parts of stack trace during starup:

  1org.apache.catalina.startup.HostConfig deployDirectory
  2INFO: Deploying web application directory D:\liferay-portal-6.1.2-ce-ga3\tomcat-7.0.40\webapps\portal-compat-hook
  3       at java.security.AccessController.doPrivileged(Native Method)
  4       at java.io.FilePermission.init(FilePermission.java:209)
  5       at java.io.FilePermission.<init>(FilePermission.java:285)
  6       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
  7       at java.io.File.isDirectory(File.java:838)
  8       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
  9       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
10       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
11       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
12       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
13       at java.security.AccessController.doPrivileged(Native Method)
14       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
15       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
16       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
17       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
18       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
19       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
20       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
21       at java.security.AccessController.checkPermission(AccessController.java:559)
22       at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
23       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
24       at java.io.File.isDirectory(File.java:838)
25       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
26       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
27       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
28       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
29       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
30       at java.security.AccessController.doPrivileged(Native Method)
31       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
32       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
33       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
34       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
35       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
36       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
37       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
38       at java.security.AccessController.checkPermission(AccessController.java:559)
39       at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
40       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
41       at java.io.File.isDirectory(File.java:838)
42       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
43       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
44       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
45       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
46       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
47       at java.security.AccessController.doPrivileged(Native Method)
48       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
49       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
50       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
51       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
52       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
53       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
54       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
55       at java.security.AccessController.checkPermission(AccessController.java:559)
56       at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
57       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
58       at java.io.File.isDirectory(File.java:838)
59       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
60       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
61       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
62       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
63       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
64       at java.security.AccessController.doPrivileged(Native Method)
65       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
66       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
67       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
68       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
69       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
70sty 25, 2014 10:48:12 PM org.apache.catalina.startup.HostConfig deployDirectory
71INFO: Deploying web application directory D:\programy\liferay-portal-6.1.2-ce-ga3\tomcat-7.0.40\webapps\resources-importer-web
72       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
73       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
74       at java.security.AccessController.checkPermission(AccessController.java:559)
75       at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
76       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
77       at java.io.File.isDirectory(File.java:838)
78       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
79       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
80       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
81       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
82       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
83       at java.security.AccessController.doPrivileged(Native Method)
84       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
85       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
86       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
87       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
88       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
89       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
90       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
91       at java.security.AccessController.checkPermission(AccessController.java:559)
92       at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
93       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
94       at java.io.File.isDirectory(File.java:838)
95       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
96       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
97       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
98       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
99       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
100       at java.security.AccessController.doPrivileged(Native Method)
101       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
102       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
103       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
104       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
105       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
106       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
107       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
108sty 25, 2014 10:48:12 PM org.apache.catalina.startup.HostConfig deployDirectory
109INFO: Deploying web application directory D:\programy\liferay-portal-6.1.2-ce-ga3\tomcat-7.0.40\webapps\welcome-theme
110       at java.security.AccessController.checkPermission(AccessController.java:559)
111       at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
112       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
113       at java.io.File.isDirectory(File.java:838)
114       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
115       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
116       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
117       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
118       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
119       at java.security.AccessController.doPrivileged(Native Method)
120       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
121       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
122       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
123       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
124       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
125       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
126       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
127       at java.security.AccessController.checkPermission(AccessController.java:559)
128       at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
129       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
130       at java.io.File.isDirectory(File.java:838)
131       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
132       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
133       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
134       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
135       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
136       at java.security.AccessController.doPrivileged(Native Method)
137       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
138       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
139       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
140       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
141       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
142       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
143       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
144       at java.security.AccessController.checkPermission(AccessController.java:559)
145       at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
146       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
147       at java.io.File.isDirectory(File.java:838)
148       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
149       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
150       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
151       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
152       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
153       at java.security.AccessController.doPrivileged(Native Method)
154       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
155       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
156       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
157       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
158       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
159       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
160       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
161       at java.security.AccessController.checkPermission(AccessController.java:559)
162       at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
163       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
164       at java.io.File.isDirectory(File.java:838)
165       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
166       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
167       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
168       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
169       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
170       at java.security.AccessController.doPrivileged(Native Method)
171       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
172       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
173       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
174       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
175       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
176       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
177       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
178       at java.security.AccessController.checkPermission(AccessController.java:559)
179       at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
180       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
181       at java.io.File.isDirectory(File.java:838)
182       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
183       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
184       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
185       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
186       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
187       at java.security.AccessController.doPrivileged(Native Method)
188       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
189       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
190       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
191       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
192       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
193       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
194       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
195       at java.security.AccessController.checkPermission(AccessController.java:559)
196       at com.liferay.portal.security.pacl.PortalSecurityManagerImpl.checkPermission(PortalSecurityManagerImpl.java:265)
197       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
198       at java.io.File.isDirectory(File.java:838)
199       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)
200       at sun.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1824)
201       at sun.security.provider.PolicyFile.access$700(PolicyFile.java:283)
202       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1237)
203       at sun.security.provider.PolicyFile$5.run(PolicyFile.java:1235)
204       at java.security.AccessController.doPrivileged(Native Method)
205       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1234)
206       at sun.security.provider.PolicyFile.getPermissions(PolicyFile.java:1181)
207       at sun.security.provider.PolicyFile.implies(PolicyFile.java:1135)
208       at com.liferay.portal.security.pacl.PortalPolicy._checkWithParentPolicy(PortalPolicy.java:261)
209       at com.liferay.portal.security.pacl.PortalPolicy.implies(PortalPolicy.java:165)
210       at java.security.ProtectionDomain.implies(ProtectionDomain.java:272)
211       at java.security.AccessControlContext.checkPermission(AccessControlContext.java:350)
212
213

Do you have any suggestions how to enable PACL? What am I doing wrong:?

kind regards

RE: enabling PACL on 6.1ga3

January 26, 2014 3:01 PM

Answer

Rank: Youngling

Posts: 0

Join Date: January 30, 2011

was anybody able to run security manager on liferay 6.1 budnled with tomcat?

in logs I can also find:

1Exception in thread "com.liferay.portal.kernel.deploy.auto.AutoDeployScanner" java.lang.StackOverflowError
2       at java.security.AccessController.doPrivileged(Native Method)
3       at java.io.FilePermission.init(FilePermission.java:209)
4       at java.io.FilePermission.<init>(FilePermission.java:285)
5       at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
6       at java.io.File.isDirectory(File.java:838)
7       at sun.net.www.ParseUtil.fileToEncodedURL(ParseUtil.java:269)

RE: enabling PACL on 6.1ga3

February 15, 2014 4:37 PM

Answer

Rank: Youngling

Posts: 0

Join Date: January 30, 2011

it's still not working.
I tried to change Xss from default 256k to 2,4,8m - but no sucess.
Every time StackOverflow is beeing thrown.

Do You have any idea how to enable security in Liferay 6.1.2?

RE: enabling PACL on 6.1ga3

February 16, 2014 4:35 AM

Answer

Rank: Youngling

Posts: 0

Join Date: January 30, 2011

I've reported issue: https://issues.liferay.com/browse/LPS-44320