Examples with PrivilegedAction java.security.PrivilegedAction used on opensource projects

Example 11 with PrivilegedAction

use of java.security.PrivilegedAction in project wildfly by wildfly.

the class LogoutSessionListener method sessionDestroyed.

@Override
public void sessionDestroyed(HttpSessionEvent se) {
    //we need to get the current account
    //there are two options here, we can look for the account in the current request
    //or we can look for the account that has been saved in the session
    //for maximum compatibility we do both
    ServletRequestContext src = ServletRequestContext.current();
    Account requestAccount = null;
    if (src != null) {
        requestAccount = src.getExchange().getSecurityContext().getAuthenticatedAccount();
        if (requestAccount != null) {
            clearAccount(requestAccount);
        }
    }
    if (se.getSession() instanceof HttpSessionImpl) {
        final HttpSessionImpl impl = (HttpSessionImpl) se.getSession();
        Session session;
        if (WildFlySecurityManager.isChecking()) {
            session = WildFlySecurityManager.doChecked(new PrivilegedAction<Session>() {

                @Override
                public Session run() {
                    return impl.getSession();
                }
            });
        } else {
            session = impl.getSession();
        }
        if (session != null) {
            AuthenticatedSessionManager.AuthenticatedSession authenticatedSession = (AuthenticatedSessionManager.AuthenticatedSession) session.getAttribute(CachedAuthenticatedSessionHandler.class.getName() + ".AuthenticatedSession");
            if (authenticatedSession != null) {
                Account sessionAccount = authenticatedSession.getAccount();
                if (sessionAccount != null && !sessionAccount.equals(requestAccount)) {
                    clearAccount(sessionAccount);
                }
            }
        }
    }
}

Example 12 with PrivilegedAction

use of java.security.PrivilegedAction in project wildfly by wildfly.

the class KeyAffinityServiceFactoryBuilder method build.

@Override
public ServiceBuilder<KeyAffinityServiceFactory> build(ServiceTarget target) {
    int bufferSize = this.bufferSize;
    Function<ExecutorService, KeyAffinityServiceFactory> mapper = executor -> new KeyAffinityServiceFactory() {

        @Override
        public <K> KeyAffinityService<K> createService(Cache<K, ?> cache, KeyGenerator<K> generator) {
            CacheMode mode = cache.getCacheConfiguration().clustering().cacheMode();
            return mode.isDistributed() || mode.isReplicated() ? new KeyAffinityServiceImpl<>(executor, cache, generator, bufferSize, Collections.singleton(cache.getCacheManager().getAddress()), false) : new SimpleKeyAffinityService<>(generator);
        }
    };
    Supplier<ExecutorService> supplier = () -> {
        ThreadGroup threadGroup = new ThreadGroup("KeyAffinityService ThreadGroup");
        String namePattern = "KeyAffinityService Thread Pool -- %t";
        PrivilegedAction<ThreadFactory> action = () -> new JBossThreadFactory(threadGroup, Boolean.FALSE, null, namePattern, null, null);
        return Executors.newCachedThreadPool(doPrivileged(action));
    };
    Service<KeyAffinityServiceFactory> service = new SuppliedValueService<>(mapper, supplier, ExecutorService::shutdown);
    return new AsynchronousServiceBuilder<>(this.getServiceName(), service).startSynchronously().build(target).setInitialMode(ServiceController.Mode.ON_DEMAND);
}

Example 13 with PrivilegedAction

use of java.security.PrivilegedAction in project poi by apache.

the class ZipSecureFile method addThreshold.

public static ThresholdInputStream addThreshold(final InputStream zipIS) throws IOException {
    ThresholdInputStream newInner;
    if (zipIS instanceof InflaterInputStream) {
        newInner = AccessController.doPrivileged(new // NOSONAR
        PrivilegedAction<ThresholdInputStream>() {

            @Override
            @SuppressForbidden("TODO: Fix this to not use reflection (it will break in Java 9)! " + "Better would be to wrap *before* instead of trying to insert wrapper afterwards.")
            public ThresholdInputStream run() {
                try {
                    Field f = FilterInputStream.class.getDeclaredField("in");
                    f.setAccessible(true);
                    InputStream oldInner = (InputStream) f.get(zipIS);
                    ThresholdInputStream newInner2 = new ThresholdInputStream(oldInner, null);
                    f.set(zipIS, newInner2);
                    return newInner2;
                } catch (Exception ex) {
                    LOG.log(POILogger.WARN, "SecurityManager doesn't allow manipulation via reflection for zipbomb detection - continue with original input stream", ex);
                }
                return null;
            }
        });
    } else {
        // the inner stream is a ZipFileInputStream, i.e. the data wasn't compressed
        newInner = null;
    }
    return new ThresholdInputStream(zipIS, newInner);
}

Example 14 with PrivilegedAction

use of java.security.PrivilegedAction in project lucene-solr by apache.

the class SolrZooKeeper method closeCnxn.

public void closeCnxn() {
    final Thread t = new Thread() {

        @Override
        public void run() {
            try {
                AccessController.doPrivileged((PrivilegedAction<Void>) this::closeZookeeperChannel);
            } finally {
                spawnedThreads.remove(this);
            }
        }

        @SuppressForbidden(reason = "Hack for Zookeper needs access to private methods.")
        private Void closeZookeeperChannel() {
            final ClientCnxn cnxn = getConnection();
            synchronized (cnxn) {
                try {
                    final Field sendThreadFld = cnxn.getClass().getDeclaredField("sendThread");
                    sendThreadFld.setAccessible(true);
                    Object sendThread = sendThreadFld.get(cnxn);
                    if (sendThread != null) {
                        Method method = sendThread.getClass().getDeclaredMethod("testableCloseSocket");
                        method.setAccessible(true);
                        try {
                            method.invoke(sendThread);
                        } catch (InvocationTargetException e) {
                        // is fine
                        }
                    }
                } catch (Exception e) {
                    throw new RuntimeException("Closing Zookeeper send channel failed.", e);
                }
            }
            // Void
            return null;
        }
    };
    spawnedThreads.add(t);
    t.start();
}

Example 15 with PrivilegedAction

use of java.security.PrivilegedAction in project sling by apache.

the class ProtectedFunctionMapper method getMapForFunction.

/**
     * Creates an instance for this class, and stores the Method for the given
     * EL function prefix and name. This method is used for the case when there
     * is only one function in the EL expression.
     * 
     * @param fnQName
     *            The EL function qualified name (including prefix)
     * @param c
     *            The class containing the Java method
     * @param methodName
     *            The name of the Java method
     * @param args
     *            The arguments of the Java method
     * @throws RuntimeException
     *             if no method with the given signature could be found.
     */
public static ProtectedFunctionMapper getMapForFunction(String fnQName, final Class c, final String methodName, final Class[] args) {
    java.lang.reflect.Method method;
    ProtectedFunctionMapper funcMapper;
    if (SecurityUtil.isPackageProtectionEnabled()) {
        funcMapper = (ProtectedFunctionMapper) AccessController.doPrivileged(new PrivilegedAction() {

            public Object run() {
                return new ProtectedFunctionMapper();
            }
        });
        try {
            method = (java.lang.reflect.Method) AccessController.doPrivileged(new PrivilegedExceptionAction() {

                public Object run() throws Exception {
                    return c.getDeclaredMethod(methodName, args);
                }
            });
        } catch (PrivilegedActionException ex) {
            throw new RuntimeException("Invalid function mapping - no such method: " + ex.getException().getMessage());
        }
    } else {
        funcMapper = new ProtectedFunctionMapper();
        try {
            method = c.getDeclaredMethod(methodName, args);
        } catch (NoSuchMethodException e) {
            throw new RuntimeException("Invalid function mapping - no such method: " + e.getMessage());
        }
    }
    funcMapper.theMethod = method;
    return funcMapper;
}