"WFSM000001: Permission check failed" in JBoss EAP 7
Issue
-
See permission error in server.log
2016-12-14 13:37:30,131 ERROR [org.jboss.msc.service.fail] (ServerService Thread Pool -- 70) MSC000001: Failed to start service jboss.undertow.deployment.default-server.default-host./myapp: org.jboss.msc.service.StartException in service jboss.undertow.deployment.default-server.default-host./myapp: java.lang.ExceptionInInitializerError at org.wildfly.extension.undertow.deployment.UndertowDeploymentService$1.run(UndertowDeploymentService.java:85) ... ... Caused by: java.lang.ExceptionInInitializerError ... ... Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.util.PropertyPermission" "log4j.configurationFile" "read")" in code source "(vfs:/content/myapp.war/WEB-INF/classes <no signer certificates>)" of "null") ... ...
-
Deployment fails on CLI with error
{"WFLYCTL0062: Composite operation failed and was rolled back. Steps that failed:" => {"Operation step-2" => {"WFLYCTL0080: Failed services" => {"jboss.deployment.unit.\"myapp.war\".undertow-deployment" => "java.lang.RuntimeException: java.security.AccessControlException: WFSM000001: Permission check failed (permission \"(\"org.jboss.vfs.VirtualFilePermission\" \"/content/myapp.war/WEB-INF/lib/xyz.jar/META-INF/resources\" \"getfile\")\" in code source \"(vfs:/content/myapp.war/WEB-INF/classes <no signer certificates>)\" of \"ModuleClassLoader for Module \"deployment.myapp.war\" from ServiceModule Loader\") Caused by: java.lang.RuntimeException: java.security.AccessControlException: WFSM000001: Permission check failed (permission \"(\"org.jboss.vfs.VirtualFilePermission\" \"/content/myapp.war/WEB-INF/lib/xyz.jar.jar/META-INF/resources\" \"getfile\")\" in code source \"(vfs:/content/myapp.war/WEB-INF/classes <no signer certificates>)\" of \"ModuleClassLoader for Module \"deployment.myapp.war\" from Service Module Loader\") Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission \"(\"org.jboss.vfs.VirtualFilePermission\" \"/content/myapp.war/WEB-INF/lib/xyz.jar.jar/META-INF/resources\" \"getfile\")\" in code source \"(vfs:/content/myapp.war/WEB-INF/classes <no signer certificates>)\" of \"ModuleClassLoader for Module \"deployment.myapp.war\" from Service Module Loader\")"}}}}
Environment
- Red Hat JBoss Enterprise Application Platform (EAP)
- 7
- Security Manager enabled (-secmgr)
- Deploying Application
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.