Re: [Php-java-bridge-users] java.security.AccessControlException: access denied error

[<php...@li...>]

English version of the article:

http://www.h-online.com/open/news/item/Spat-over-PHP-Suhosin-patch-943194.html

http://www.h-online.com/newsticker/news/item/Fallout-from-the-OpenSSL-debacle-736175.html

On 4/1/10, Jost Boekemeier <jos...@go...> wrote:
> Hi Hameed,
>
>> I have just installed Ubuntu Linux and then php/java bridge in our new
>> development server.
>
> please follow the install instructions at:
> http://php-java-bridge.sourceforge.net/pjb/installation.php
>
>
>> "FATAL: Undeclared
>> java.lang.RuntimeException detected. java.lang.Exception: Invoke
>> failed: [[c:System]]->getProperties. Cause:
>> java.security.AccessControlException: access denied
>> (java.util.PropertyPermission * read,write) VM:
>> 1.6.0_0@http://java.sun.com/" at:
>
> This error message means that the Debian/Ubuntu devs have denied
> access to System.getProperties().
>
> Please see our FAQ entry "I want to use Tomcat's security manager, how
> do I install the bridge?" at
> http://php-java-bridge.sourceforge.net/pjb/FAQ.html
>
>
>> Our previous development server was Windows 2003 where I did not get
>> these
>> errors. Also my experience with Linux us very less.
>
> You have probably picked the wrong Linux distribution. You won't get
> such error messages in Red Hat Enterprise- or Fedora Linux.
>
> It is a good idea to avoid debian packages. Debian maintainers apply
> patches without knowing what they do. The debian-patched tomcat runs
> as user root, with dropped privileges, so that user.home is not
> accessible. Other such examples are the debian PHP suoshin "patch" and
> the debian OpenSSL "patch", see
> http://www.heise.de/security/meldung/Querelen-um-PHP-Suhosin-Patch-942667.html
>
>
>
> Regards,
> Jost Bökemeier
>