Uploaded image for project: 'NetarchiveSuite'
  1. NetarchiveSuite
  2. NAS-2376

Security manager should only be activated for Bitarchive application

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Fixed
    • Minor
    • 5.0
    • None
    • Deploy
    • None
    • 5.0 Milestone1
    • Hide

      On devel@kb-prod-udv-001.kb.dk go to the prepared_software/SystemTest directory and run

      [devel@kb-prod-udv-001 SystemTest]$ grep security /start
      and
      [devel@kb-prod-udv-001 SystemTest]$ grep security /start|grep -v BitarchiveApplication
      to show that security policy is specified in the Bitarchive apps and nowhere else.

      Show
      On devel@kb-prod-udv-001.kb.dk go to the prepared_software/SystemTest directory and run [devel@kb-prod-udv-001 SystemTest] $ grep security /start and [devel@kb-prod-udv-001 SystemTest] $ grep security /start |grep -v BitarchiveApplication to show that security policy is specified in the Bitarchive apps and nowhere else.

    Description

      Currently the java security manager is activated for all applications with a custom security policy definition. Historically the only reason for using a custom security manager in NAS has been to prevent BatchJob injected code from wrecking havoc. As the usage of a security manager causes problem when trying to access files outside of the constrained policy defined in the NAS software, we should avoid using it more than absolutely necessary.

      Note that the general usage of a custom security policy has been discussed in the NAS team + Kåre and the agreement is that this policy should at most be applied to the bitarchives, if not being discontinued altogether.

      Attachments

        Issue Links

          Activity

            People

              mss Mikis Seth Sørensen (Inactive)
              mss Mikis Seth Sørensen (Inactive)
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: