https://bugzilla.redhat.com/show_bug.cgi?id=842346
--- Comment #29 from Ade Lee <alee(a)redhat.com> ---
Ivan,
It turns out that the file: part is not necessary. The following also works:
-Djava.security.policy==${CATALINA_BASE}/conf/catalina.policy"
compared to what is currently there:
-Djava.security.policy==\"${CATALINA_BASE}/conf/catalina.policy\""
You can easily see this bug. You dont even need a webapp. Simply enable
security manager on the default tomcat instance and restart the instance.
I did this by adding the following to /etc/sysconfig/tomcat
SECURITY_MANAGER="true"
JAVA_OPTS="-Djava.security.debug=all"
and then restarting tomcat : systemctl start tomcat.service
The tomcat service FAILS TO COME UP and there is an error in the log indicating
a Malformed URL for the policy.
So, upstream is right -- what is wrong is the invocation in this script.
This is a clear and simply reproducible bug. Its also going to cause all kinds
of problems for IPA and Dogtag users when they upgrade to Fedora 20. We need a
fix for this ASAP.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=iJSXV6zCDV&a=cc_unsubscribe