Questions tagged [java-security-manager]

69 questions
0
votes
1 answer

JVM - Java Virtual Machine Corruption

How can I check and detect a JVM corrupted? How can I check that Security Manager, Byte Code Verifier and Class Loader are working correctly?
Giuseppe
  • 447
  • 2
  • 5
  • 14
0
votes
0 answers

Prevent reflection without SecurityManager

I'm making a java program inside an environment that loads code from files put in a "loading directory". This environment launches my code after it has already set an unreplacable SecurityManager. I'm trying to hide a SecretKey from any malicious…
0
votes
0 answers

How to run Apache Sling with an enabled SecurityManager?

Did anybody run Apache Sling with an enabled Java SecurityManager? That'd need a special java.policy file to allow the actions done by all deployed bundles, and it'd be extremely helpful to have a basic version that already allows what's needed by…
Dr. Hans-Peter Störr
  • 25,298
  • 30
  • 102
  • 139
0
votes
0 answers

Java SecurityManager only block reflection invoke and set

I want my SecurityManager to only block invoke for method and set for field reflection. getDeclaredMethods or similar should stay allowed. Is this possible? I want to block change of the security field of the private java.lang.System class, but…
Aura Lee
  • 416
  • 3
  • 11
0
votes
1 answer

JNI Call to MIP SDK gives error - Can't open database, check folder permissions: mip_data\mip\mip.policies.sqlite3

We have application in java where Java security is enabled. We need to fetch the tags from AIP cloud. We could get the access token using msal4j java library. There is no java library provided by MS for MIP so we have implemented native dll to fetch…
0
votes
1 answer

Permission denied expection when fetching System property "os.arch" when java Security Manager enabled

I have a simple java application ClientApp which has Java Security Manager enable. This application is trying to call method of Test jar which fetches "os.arch" System property. Since it is time consuming we are invoking a new thread using…
0
votes
1 answer

How to provide java security for white listed packages using java security manager?

Problem: I am trying to provide restriction (blacklisting ) all and allow only what I provided when we execute groovy using GroovyClassLoader I am able to execute custom policy using with limited permission for GroovyClassLoader only. Now I am…
Ranjitsinh
  • 1,323
  • 1
  • 11
  • 28
0
votes
1 answer

Tomcat9 slow response with security manager in OpenJdk11

We added -Djava.security.manager parameter in java options of tomcat9 to enable security manager . Tomcat is running without any issue but when I try to perform some operation then it takes 9-10 min to process that(login, logout of deployed…
0
votes
1 answer

jars are not loaded with java.security.manager enabled

We running one spring-boot application, which will download some jars dynamically in /tmp folder and execute some functions in side those jars. Now we have enabled java.security.manager and gave below policies in security.policy file. below are the…
Karunakar Reddy L
  • 342
  • 1
  • 4
  • 21
0
votes
1 answer

Java Security Manager (Strange Behavior)

I am testing Java Security Manager in a simple java application. I write the properties "user.home", "user.info". I read the properties "user.home", "user.info". I set a policy file that ALLOWS read/write on "user.home", "user.info". I start a…
0
votes
0 answers

SecurityManager is not allowing read file although stated in the policy

This is my error: java.security.AccessControlException: access denied ("java.io.FilePermission" "C:\Temp\SettingsApp.policy" "read") This is my policy (dynamically made for each app) grant signedBy "SmartMirror" { permission…
Jaquarh
  • 6,493
  • 7
  • 34
  • 86
0
votes
0 answers

How to check if two hashed string belong to same clear text password

Recently I am stuck in a problem related to password encoding/decoding and matching and updating the same in db, need your help guys. Problem goes like below - User comes to the portal creates the account for which data is stored in the db(for…
Arvind Kumar
  • 459
  • 5
  • 21
0
votes
1 answer

Exception while running EvoSuite tests related to Security manager

I'm trying to run EvoSuite tests with this tutorial. I'm able to generate test classes and compile them using java 8. However, when try to run it using the below command, an exception is thrown. java -cp…
Aarati
  • 321
  • 1
  • 10
0
votes
1 answer

why java tcp server is accepting closed socket?

I have a class A that accepts TCP connection and send this new socket to Thread B where data from that socket is received and sent. Class A{ Class b = new B(); public void run() { b.start(); while(true){ …
Al-Alamin
  • 1,438
  • 2
  • 15
  • 34
0
votes
1 answer

How can I add a security policy file to a gradle build for an rmi application?

Can anyone tell me how I can add the java command "-Djava.security.policy=mysecurity.policy" to a gradle build for a java rmi application. Thanks. This is the error I get when I run gradle run gradle run Task :run Exception in thread "main"…