How to enable a security manager on a single server and not on all servers launched by the host

Solution Verified - Updated -

Issue

  • We are experiencing poor performance with the security manager enabled. Our analysis points to the following classes as the bottleneck
    Most invoked method with security manager enabled
  • We have an application where we have a host controller for multiple servers. We succeeded in enabling the security manager at the host controller level.
    However, we noticed quite a performance hit with a security manager enabled and would like to be able to have it enable only on the server that requires it.
    We tried the following but there was no improvement in performance

    • uncommenting the line SECMGR="true"
    • providing a different policy file to each server so that each one runs with its own policy:
        <server name="server-one" group="main-server-group">
            <jvm name="default">
              <jvm-options>
              <option value="-Djava.security.policy=/tmp/server1.policy"></option>
              </jvm-options>
           </jvm>
* tested setting using the single (=) and double equal (==) for java.security.policy but to no avail

Environment

  • Red Hat JBoss Enterprise Application Platform (EAP) 6.4.x, 7.0.x, 7.1.x
    • Domain mode
    • Security manager enabled

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.