search

pki-bot / pki-issues-final

0 stars 0 forks source link

Enrollment is successful when there is no read permission to the applet file #2736

Open pki-bot opened 4 years ago

pki-bot commented 4 years ago

This issue was migrated from Pagure Issue #3187. Originally filed by dmoluguw (@SilleBille) on 2020-06-30 13:15:30:

Description of problem:

Enrollment is successful when there is no read permission to the applet file

Version-Release number of selected component (if applicable):

pki-tps-10.4.1-10.el7pki.x86_64

How reproducible:

always

Steps to Reproduce:

  1. [root@nocp1 ~]# chmod 000 /usr/share/pki/tps/applets/1.4.58768072.ijc
  2. Enroll a smartcard token

Actual results:

Enrollment is successful

Expected results:

Enrollment should fail when trying to use the applet version

Additional info:

Format operation fails.

[07/Sep/2017:16:01:31][http-bio-25080-exec-12]: TPSProcess.getAppletMemorySize: returning: 5000
[07/Sep/2017:16:01:31][http-bio-25080-exec-12]: TPSProcessor.getChannelDefKeyVersion: 0
[07/Sep/2017:16:01:31][http-bio-25080-exec-12]: TPSProcessor.getChannelDefKeyIndex: 0
[07/Sep/2017:16:01:31][http-bio-25080-exec-12]: TPSProcessor.getAppletDirectory: getting config: op.format.userKey.update.applet.directory
[07/Sep/2017:16:01:31][http-bio-25080-exec-12]: getAppletDirectory: returning: /usr/share/pki/tps/applets
[07/Sep/2017:16:01:31][http-bio-25080-exec-12]: TPSProcessor.upgradeApplet: applet target directory: /usr/share/pki/tps/applets
[07/Sep/2017:16:01:31][http-bio-25080-exec-12]: TPSProcessor.getAppletExtension: returning: ijc
[07/Sep/2017:16:01:31][http-bio-25080-exec-12]: TPSProcessor.upgradeApplet: targe applet file name: /usr/share/pki/tps/applets/1.4.58768072.ijc
[07/Sep/2017:16:01:31][http-bio-25080-exec-12]: TPSProcessor.getAppletFileData: IOException java.nio.file.AccessDeniedException: /usr/share/pki/tps/applets/1.4.58768072.ijc
[07/Sep/2017:16:01:31][http-bio-25080-exec-12]: TPSSession.process: IO error happened during processing: java.nio.file.AccessDeniedException: /usr/share/pki/tps/applets/1.4.58768072.ijc
pki-bot commented 4 years ago

Comment from dmoluguw (@SilleBille) at 2020-06-30 13:15:53

Metadata Update from @SilleBille: