forked from pool/tomcat
83c25cd053
- Fixed Security Manager policies, which makes unable properly run webapps by default. (bnc#891264) Added: tomcat-7.0-sle.catalina.policy.patch - Missing security manager policy file prevents Tomcat to start with systemd. (bnc#890995) - Tomcat 7.0.55 requires ecj 4.4.0 OBS-URL: https://build.opensuse.org/request/show/249896 OBS-URL: https://build.opensuse.org/package/show/Java:packages/tomcat?expand=0&rev=60
51 lines
2.2 KiB
Diff
51 lines
2.2 KiB
Diff
diff -Naur apache-tomcat-7.0.55-src/conf/catalina.policy apache-tomcat-7.0.55-src.new/conf/catalina.policy
|
|
--- apache-tomcat-7.0.55-src/conf/catalina.policy 2014-07-18 16:49:04.000000000 +0200
|
|
+++ apache-tomcat-7.0.55-src.new/conf/catalina.policy 2014-09-16 17:49:07.963129705 +0200
|
|
@@ -95,6 +95,7 @@
|
|
// ${file.separator}classes${file.separator}logging.properties", "read";
|
|
};
|
|
|
|
+
|
|
// These permissions apply to the server startup code
|
|
grant codeBase "file:${catalina.home}/bin/bootstrap.jar" {
|
|
permission java.security.AllPermission;
|
|
@@ -107,7 +108,6 @@
|
|
permission java.security.AllPermission;
|
|
};
|
|
|
|
-
|
|
// If using a per instance lib directory, i.e. ${catalina.base}/lib,
|
|
// then the following permission will need to be uncommented
|
|
// grant codeBase "file:${catalina.base}/lib/-" {
|
|
@@ -162,6 +162,9 @@
|
|
permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat";
|
|
|
|
// Precompiled JSPs need access to these packages.
|
|
+ permission java.lang.RuntimePermission "accessClassInPackage.org.apache.jasper";
|
|
+ permission java.lang.RuntimePermission "accessClassInPackage.org.apache.jasper.servlet";
|
|
+ permission java.lang.RuntimePermission "accessClassInPackage.org.apache.jasper.compiler";
|
|
permission java.lang.RuntimePermission "accessClassInPackage.org.apache.jasper.el";
|
|
permission java.lang.RuntimePermission "accessClassInPackage.org.apache.jasper.runtime";
|
|
permission java.lang.RuntimePermission
|
|
@@ -214,6 +217,15 @@
|
|
permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.util";
|
|
};
|
|
|
|
+// Additional basic permissions for web applications.
|
|
+grant codeBase "file:/usr/share/java/tomcat-servlet-api.jar" {
|
|
+ permission java.security.AllPermission;
|
|
+};
|
|
+
|
|
+grant codeBase "file:/usr/share/java/tomcat-el-api.jar" {
|
|
+ permission java.security.AllPermission;
|
|
+};
|
|
+
|
|
// You can assign additional permissions to particular web applications by
|
|
// adding additional "grant" entries here, based on the code base for that
|
|
// application, /WEB-INF/classes/, or /WEB-INF/lib/ jar files.
|
|
@@ -245,4 +257,3 @@
|
|
// grant codeBase "jar:file:${catalina.base}/webapps/examples/WEB-INF/lib/scrape.jar!/-" {
|
|
// permission java.net.SocketPermission "*.noaa.gov:80", "connect";
|
|
// };
|
|
-
|