Facing issues with enabling security manager using SECMGR=true

Solution Verified - Updated -

Environment

  • Red Hat JBoss Enterprise Application Platform (EAP)
    • 7.x

Issue

  • We have added AllPermissions in oracle module.xml and also tried adding AllPermissions into an ear META-INF/permissions.xml, yet no sub-deployments deploy.
<module xmlns="urn:jboss:module:1.8" name="com.oracle.jdbc">
   <permissions>
    <grant permission="java.security.AllPermission"/>
   </permissions>
   <resources>
     <resource-root path="ojdbc8.jar"/>

With above configuration following error is observed in server log:

ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool -- 41) WFLYCTL0013: Operation ("add") failed - address: ([
    ("subsystem" => "datasources"),
    ("jdbc-driver" => "ojdbc8")
]) - failure description: "WFLYJCA0041: Failed to load module for driver [com.oracle.jdbc]"

Resolution

  • Add "name" attribute in module.xml like below to fix the issue.
<module xmlns="urn:jboss:module:1.8" name="com.oracle.jdbc">
   <permissions>
    <grant permission="java.security.AllPermission" name="*"/>
   </permissions>
   <resources>
     <resource-root path="ojdbc8.jar"/>

Root Cause

  • The name required attribute was missing in module.xml of oracle jdbc driver. The attribute "name" is required in grant element of permissions section in module.xml.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments