From: | thomas at tada(dot)se (Thomas Hallgren) |
---|---|
To: | |
Subject: | [Pljava-dev] SecurityException on pljava-1.2 |
Date: | 2006-03-02 06:09:28 |
Message-ID: | 44068C18.50206@tada.se |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pljava-dev |
Satoshi,
You are trying to execute an operating system command. Using a function
that is declared with 'language java' that will not be permitted since,
'java' in PostgreSQL terminology is a 'trusted language'. You need to
declare your function with 'language javaU' (untrusted). Some relevant
links:
http://gborg.postgresql.org/project/pljava/genpage.php?userguide#Trusted_language
http://www.postgresql.org/docs/8.1/interactive/perm-functions.html
http://www.postgresql.org/docs/8.1/interactive/sql-createlanguage.html
Regards,
Thomas Hallgren
PS.
I see that you're using packages that start with
'org.postgresql.pljava'. Are you developing something that you plan to
make part of PL/Java?
Satoshi Nagayasu wrote:
> Hi folks,
>
> When I use pljava-1.0 with PostgreSQL 8.0,
> my java procedures work fine.
>
> However, when I upgrade PG to 8.1, and pljava to 1.2,
> I got the security exception like below:
>
> java.lang.SecurityException: execute on <<ALL FILES>>
> at org.postgresql.pljava.internal.Backend$1.assertPermission(Backend.java:178)
> at org.postgresql.pljava.internal.Backend$PLJavaSecurityManager.nonRecursiveCheck(Backend.java:113)
> at org.postgresql.pljava.internal.Backend$PLJavaSecurityManager.checkPermission(Backend.java:91)
> at java.lang.SecurityManager.checkExec(SecurityManager.java:774)
> at java.lang.Runtime.exec(Runtime.java:563)
> at java.lang.Runtime.exec(Runtime.java:428)
> at java.lang.Runtime.exec(Runtime.java:364)
> at org.postgresql.pljava.restore.Command.execCommand(Command.java:27)
> at org.postgresql.pljava.restore.RestoreDB.execRestore(RestoreDB.java:33)
>
> I guess this is a kind of FAQ, but I can't find any information on the net.
> How can I fix this?
>
> Regards,
>
From | Date | Subject | |
---|---|---|---|
Next Message | Satoshi Nagayasu | 2006-03-02 07:50:26 | [Pljava-dev] SecurityException on pljava-1.2 |
Previous Message | Satoshi Nagayasu | 2006-03-01 23:18:27 | [Pljava-dev] SecurityException on pljava-1.2 |