PH04723: AN APPLICATION CONTAINS WAS.POLICY FILE TO APPLY ADDITIONAL PERMISSIONS MIGHT NOT BE DETECTED AND ALLOWED TO INSTALLED.

8.5.5.15: WebSphere Application Server V8.5.5 Fix Pack 15
8.5.5.17: WebSphere Application Server V8.5.5 Fix Pack 17
8.5.5.20: WebSphere Application Server V8.5.5.20
8.5.5.18: WebSphere Application Server V8.5.5 Fix Pack 18
8.5.5.19: WebSphere Application Server V8.5.5 Fix Pack 19
8.5.5.16: WebSphere Application Server V8.5.5 Fix Pack 16
8.5.5.21: WebSphere Application Server V8.5.5.21

APAR status

• Closed as program error.

Error description

• If the was.policy file inside an application is used to apply
  additional
  permissions to various resources in the application other than
  the default
  permissions and if any additional permission happens to be a
  permission in
  the filter.policy file which is used to restrict permission, the
  conflict
  of permission may not be detected and the application is allowed
  to be installed.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server versions 8.5.5 with JDK8.0           *
  ****************************************************************
  * PROBLEM DESCRIPTION: If an application contains a            *
  *                      was.policy file (used to apply          *
  *                      additional permissions to various       *
  *                      resources) and the cell contains a      *
  *                      filter.policy file (used to restrict    *
  *                      permissions), a conflict of             *
  *                      permissions within the files may not    *
  *                      be detected and the application is      *
  *                      allowed to be installed when it         *
  *                      shouldn't.                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  If an application contains a was.policy file (used to apply
  additional permissions to various resources) and the cell
  contains a filter.policy file (used to restrict permissions), a
  conflict of permissions within the files may not be detected
  and the application is allowed to be installed when it
  shouldn't.
  

Problem conclusion

• The code has been modified to fail the application
  installation when the application contains a was.policy file
  that is inconsistent with the cell wide filter.policy file.
  
  The fix for this APAR is currently targeted for inclusion in
  fixpack 8.5.5.15. Please refer to the Recommended Updates
  page for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels

• R850 PSY

     UP