PM08337: JAVA 2 SECURITY ERRORS MAY OCCUR WHEN RUNNING A JAX-WS APPLICATION

APAR status

• Closed as program error.

Error description

• Java 2 Security errors may be seen when running
  JAX-WS applications.  Examples of the errors that may be
  seen follow:
  [12/8/09 1:36:55:094 EST] 0000003b SecurityManag W
  SECJ0314W: Current Java 2 Security policy reported a potential
  violation of Java 2 Security Permission. Please refer to
  InfoCenter for further information.
  
  Permission:
  
        com.ibm.ws.asynchbeans.AsynchBeansService : Access
  denied (org.osgi.framework.ServicePermission
  com.ibm.ws.asynchbeans.AsynchBeansService get)
  
  [12/8/09 1:36:55:147 EST] 0000003b SecurityManag W
  SECJ0314W: Current Java 2 Security policy reported a potential
  violation of Java 2 Security Permission. Please refer to
  InfoCenter for further information.
  
  Permission:
  
        getClassLoader : Access denied
  (java.lang.RuntimePermission getClassLoader)
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  Users of IBM WebSphere Application Server   *
  *                  Feature Pack for Web Services and JAX-WS    *
  *                  applications.                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: Java 2 Security errors may occur        *
  *                      when running JAX-WS applications.       *
  ****************************************************************
  * RECOMMENDATION:  Install a fixpack containing this APAR.     *
  ****************************************************************
  Java 2 security errors may be seen when running JAX-WS
  applications.  The following are two examples of the errors
  that may be seen:
  
  [12/8/09 1:36:55:094 EST] 0000003b SecurityManag W
  SECJ0314W: Current Java 2 Security policy reported a potential
  violation of Java 2 Security Permission. Please refer to
  InfoCenter for further information.
  
  Permission:
  
        com.ibm.ws.asynchbeans.AsynchBeansService : Access
  denied (org.osgi.framework.ServicePermission
  com.ibm.ws.asynchbeans.AsynchBeansService get)
  
  Here is another example:
  
  [12/8/09 1:36:55:147 EST] 0000003b SecurityManag W
  SECJ0314W: Current Java 2 Security policy reported a potential
  violation of Java 2 Security Permission. Please refer to
  InfoCenter for further information.
  
  Permission:
  
        getClassLoader : Access denied
  (java.lang.RuntimePermission getClassLoader)
  
  
  The JAX-WS runtime should always have appropriate security
  privileges.
  

Problem conclusion

• The JAX-WS runtime has been corrected to allow getService and
  getClassLoader requests to proceed without experiencing Java 2
  Security errors.
  
  This error is fixed in WebSphere Application Server Version
  7.0 by APAR PM08610.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 6.1.0.33.  Please refer to the Recommended Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PM08610

Fix information

• Fixed component name

  WEBSERVIC FEATU

• Fixed component ID

  5724J0850

Applicable component levels

• R610 PSY

     UP