"WFSM000001: Permission check failed" in JBoss EAP 7

Solution Verified - Updated -

Issue

  • See permission error in server.log

    2016-12-14 13:37:30,131 ERROR [org.jboss.msc.service.fail] (ServerService Thread Pool -- 70) MSC000001: Failed to start service jboss.undertow.deployment.default-server.default-host./myapp: org.jboss.msc.service.StartException in service jboss.undertow.deployment.default-server.default-host./myapp: java.lang.ExceptionInInitializerError
        at org.wildfly.extension.undertow.deployment.UndertowDeploymentService$1.run(UndertowDeploymentService.java:85)
        ... ...
    Caused by: java.lang.ExceptionInInitializerError
        ... ...
    Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.util.PropertyPermission" "log4j.configurationFile" "read")" in code source "(vfs:/content/myapp.war/WEB-INF/classes <no signer certificates>)" of "null")
        ... ...
    
  • Deployment fails on CLI with error

    {"WFLYCTL0062: Composite operation failed and was rolled back. Steps that failed:" => {"Operation step-2" => {"WFLYCTL0080: Failed services" => {"jboss.deployment.unit.\"myapp.war\".undertow-deployment" => "java.lang.RuntimeException: java.security.AccessControlException: WFSM000001: Permission check failed (permission \"(\"org.jboss.vfs.VirtualFilePermission\" \"/content/myapp.war/WEB-INF/lib/xyz.jar/META-INF/resources\" \"getfile\")\" in code source \"(vfs:/content/myapp.war/WEB-INF/classes <no signer certificates>)\" of \"ModuleClassLoader for Module \"deployment.myapp.war\" from ServiceModule Loader\")
        Caused by: java.lang.RuntimeException: java.security.AccessControlException: WFSM000001: Permission check failed (permission \"(\"org.jboss.vfs.VirtualFilePermission\" \"/content/myapp.war/WEB-INF/lib/xyz.jar.jar/META-INF/resources\" \"getfile\")\" in code source \"(vfs:/content/myapp.war/WEB-INF/classes <no signer certificates>)\" of \"ModuleClassLoader for Module \"deployment.myapp.war\" from Service Module Loader\")
        Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission \"(\"org.jboss.vfs.VirtualFilePermission\" \"/content/myapp.war/WEB-INF/lib/xyz.jar.jar/META-INF/resources\" \"getfile\")\" in code source \"(vfs:/content/myapp.war/WEB-INF/classes <no signer certificates>)\" of \"ModuleClassLoader for Module \"deployment.myapp.war\" from Service Module Loader\")"}}}}
    

Environment

  • Red Hat JBoss Enterprise Application Platform (EAP)
    • 7
  • Security Manager enabled (-secmgr)
  • Deploying Application

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content