IV38029: APPLICATION FAILS TO START WHEN SECURITY IS ENABLED ON WINDOWS

PM80757: SHIP Java 6 SR13 as WebSphere V700x iFix
PM80758: SHIP JAVA 6/26 SR5 AS WEBSPHERE 800x IFIX
PM84774: SHIP SDK 626 SR5 FOR WSAS V8.5
PM86919: SHIP SDK 626 SR5 FOR WSAS V8.5 THRU V8.5.0.2

APAR status

• Closed as program error.

Error description

• Error Message: Insufficient Java 2 security permissions to start
  the process!
  java.security.policy =
  file:c:/opt/Moonstone/WAS/profiles/dmgr/properties/client.policy
  CodeSource for bootstrap.jar = ProtectionDomain
  CodeSource=CodeSource,
  url=file:/C:/opt/Moonstone/WAS/lib/bootstrap.jar, <no
  certificates>
  ClassLoader=sun.misc.Launcher$AppClassLoader@d7a594b0
  <no principals>
  Permissions:
    static: java.security.Permissions@4b332e65 (
   (java.io.FilePermission \C:\opt\Moonstone\WAS\lib\bootstrap.jar
  read)
   (java.lang.RuntimePermission exitVM)
  )
    dynamic: java.security.Permissions@98fbe43c (
   (java.util.PropertyPermission java.vendor.url read)
   (java.util.PropertyPermission java.vm.vendor read)
   (java.util.PropertyPermission line.separator read)
   (java.util.PropertyPermission file.separator read)
   (java.util.PropertyPermission java.vm.version read)
   (java.util.PropertyPermission java.vm.specification.name read)
   (java.util.PropertyPermission java.vm.name read)
   (java.util.PropertyPermission path.separator read)
   (java.util.PropertyPermission os.version read)
   (java.util.PropertyPermission java.version read)
   (java.util.PropertyPermission os.name read)
   (java.util.PropertyPermission java.vm.specification.version
  read)
   (java.util.PropertyPermission java.vm.specification.vendor
  read)
   (java.util.PropertyPermission os.arch read)
   (java.util.PropertyPermission java.specification.vendor read)
   (java.util.PropertyPermission java.vendor read)
   (java.util.PropertyPermission java.class.version read)
   (java.util.PropertyPermission java.specification.name read)
   (java.util.PropertyPermission java.specification.version read)
   (java.net.SocketPermission localhost:1024- listen,resolve)
  )
  was.install.root = C:/opt/Moonstone/WAS
  .
  Stack Trace: Exception in thread 'main'
  java.lang.RuntimeException: Insufficient Java 2 security
  permissions to start the process!
   at
  com.ibm.wsspi.bootstrap.WSPreLauncher.main(WSPreLauncher.java:14
  0)
   at
  com.ibm.websphere.client.applicationclient.launchClient.main(lau
  nchClient.java:246)
  .
  N/A
  

Local fix

• The problem occurs when policy parser expands the property in
  codebase field in a policy file.
  Eg.
  grant codebase "file:${my.folder}/-" {
    permission java.security.AllPermission;
  };
  The workaround is to replace all '/' char in my.folder property
  to '\\' on Windows
  

Problem summary

• The parser will encode all '/' chars in a property when
  expanding property in codebase field for policy file on Windows
  platform.
  

Problem conclusion

• This defect will be fixed in:
  6.0.0 SR14
  6.0.1 SR6
  .
  The change is to process '/' char on Windows correctly.
  

Temporary fix

• N/A
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA CLASS LIBS

• Fixed component ID

  620700130

Applicable component levels

• R600 PSY

     UP