IV71293: EXCEPTION 'ACCESS DENIED' FOR ACTION 'JAVA.SECURITY.SECURITYPERMISSION' AFTER APPLYING IV68824

APAR status

• Closed as program error.

Error description

• Error Message: The exception detailed below is thrown.
  .
  Stack Trace: java.security.AccessControlException: Access denied
  ...... due to
  untrusted AccessControlContext since
  ("java.security.SecurityPermission"
  "createAccessControlContext") is denied
  java.security.AccessController.throwACE
  java.security.AccessController.checkPermissionHelper
  java.security.AccessController.checkPermission
  java.lang.SecurityManager.checkPermission
  java.lang.SecurityManager.checkPropertyAccess
  java.lang.System.getProperty
  

Local fix

Problem summary

• A change was introduced via APAR IV68824, such that, the jvm was
  checking whether the current context has the
  createAccessControlContext permission, even when a security
  manager was not active.
  

Problem conclusion

• The jvm has been modified to treat AccessControlContexts that
  are created when a security manager is not enabled as trusted.
  .
  This APAR will be fixed in the following Java Releases:
   6 SR16 FP4 (6.0.16.4)
   7 SR9 (7.0.9.0)
   6 R1 SR8 FP4 (6.1.8.4)
   7 R1 SR3 (7.1.3.0)
   8 SR1 (8.0.1.0)
   5.0 SR16 FP10 (5.0.16.10)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the Service
  Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IV71294 IV71295 PI50940

• Fixed component name

  J9 COMMON CODE

• Fixed component ID

  620700127

Applicable component levels

• R600 PSY

     UP

• R260 PSY

     UP

• R270 PSY

     UP