Name: gm110360 Date: 07/08/2003


FULL PRODUCT VERSION :
java version "1.4.2"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2-b28)
Java HotSpot(TM) Client VM (build 1.4.2-b28, mixed mode)


FULL OS VERSION :
Linux desktop.carfield.com.hk 2.4.20 #2 Sun May 11 23:32:46 GST 2003 i686 unknown unknown GNU/Linux


EXTRA RELEVANT SYSTEM CONFIGURATION :
Mandrake Linux will security option set to high, which normal user can browse "/"

A DESCRIPTION OF THE PROBLEM :
In mandrake linux, There is 5 security level setting in msec, which high is the 2nd security option.

In this option, have the following directory access setting:

# Welcome in Level 4, aka secure & usable.
###
/ root.adm 751
/bin/ root.adm 751
/bin/ping root.ntools 4750
/bin/rpm rpm.rpm 750
/boot/ root.ctools 710
/dev/ root.root 711
/etc/ root.adm 711
/etc/conf.modules root.adm 640
/etc/cron.daily/ root.adm 750
/etc/cron.hourly/ root.adm 750
/etc/cron.monthly/ root.adm 750
/etc/cron.weekly/ root.adm 750
/etc/crontab root.adm 640
/etc/dhcpcd/ root.adm 750
/etc/dhcpcd/* root.adm 640
/etc/ftpaccess root.adm 640
/etc/ftpconversions root.adm 640
/etc/ftpgroups root.adm 640
/etc/ftphosts root.adm 640
/etc/ftpusers root.adm 640
/etc/gettydefs root.adm 640
/etc/hosts.allow root.daemon 644
/etc/hosts.deny root.daemon 644
/etc/hosts.equiv root.daemon 640
/etc/inetd.conf root.adm 640
/etc/inittab root.adm 640
/etc/ld.so.conf root.adm 640
/etc/mandrake-release root.adm 640
/etc/modules.conf root.adm 640
/etc/motd root.adm 644
/etc/printcap root.lp 640
/etc/profile.d/* root.root 755
/etc/rc.d/ root.adm 750
/etc/rc.d/init.d/ root.adm 750
/etc/rc.d/init.d/* root.adm 740
/etc/rc.d/init.d/mandrake_consmap root.adm 644
/etc/securetty root.root 640
/etc/sendmail.cf root.mail 640
/etc/shutdown.allow root.adm 640
/etc/ssh/ssh_config root.root 644
/etc/ssh/ssh_host_*key root.adm 600
/etc/ssh/ssh_host_*key.pub root.adm 644
/etc/ssh/sshd_config root.adm 640
/etc/sysconfig root.adm 751
/etc/syslog.conf root.adm 640
/etc/updatedb.conf root.adm 640
/home/ root.adm 751
/home/* current 711
/lib/ root.adm 751
/mnt/ root.adm 755
/proc root.adm 550
/root/ root.root 700
/sbin/ root.adm 751
/tmp/ root.adm 777
/usr/ root.adm 751
/usr/* root.adm 751
/usr/X11R6/ root.xgrp 751
/usr/bin/ root.adm 751
/usr/bin/cc root.ctools 750
/usr/bin/finger root.ntools 750
/usr/bin/g++* root.ctools 750
/usr/bin/gcc* root.ctools 750
/usr/bin/ssh root.ntools 750
/usr/bin/telnet root.ntools 750
/usr/bin/w root.ntools 750
/usr/bin/who root.ntools 750
/usr/lib/rpm/rpm? rpm.rpm 750
/usr/sbin/ root.adm 751
/usr/sbin/sendmail root.mail 2711
/usr/sbin/traceroute root.ntools 4750
/usr/share/doc rpm.rpm 751
/usr/share/man rpm.rpm 751
/usr/tmp root.adm 1773
/var/ root.root 755
/var/lock/subsys root.adm 750
/var/log/ root.adm 751
/var/log/* root.root 600
/var/log/lp-errs lp.lp 600
/var/log/*/* current 600
/var/log/*/*/* current 600
/var/log/*/. current 700
/var/log/intraline/. current 750
/var/spool/mail/ root.mail 771
/var/tmp root.adm 1773

And only user have adm group right can run java, but not all other.

REGRESSION. Last worked in version mantis-beta

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Install a mandrake, set msec to high, run java

EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
Usage: java [-options] class [args...]
           (to execute a class)
   or java [-options] -jar jarfile [args...]
           (to execute a jar file)

where options include:
    -client to select the "client" VM
    -server to select the "server" VM
    -hotspot is a synonym for the "client" VM [deprecated]
                  The default VM is client.

    -cp <class search path of directories and zip/jar files>
    -classpath <class search path of directories and zip/jar files>
                  A : separated list of directories, JAR archives,
                  and ZIP archives to search for class files.
    -D<name>=<value>
                  set a system property
    -verbose[:class|gc|jni]
                  enable verbose output
    -version print product version and exit
    -showversion print product version and continue
    -? -help print this help message
    -X print help on non-standard options
    -ea[:<packagename>...|:<classname>]
    -enableassertions[:<packagename>...|:<classname>]
                  enable assertions
    -da[:<packagename>...|:<classname>]
    -disableassertions[:<packagename>...|:<classname>]
                  disable assertions
    -esa | -enablesystemassertions
                  enable system assertions
    -dsa | -disablesystemassertions
                  disable system assertions

ACTUAL -
#
# HotSpot Virtual Machine Error, Internal Error
# Please report this error at
# http://java.sun.com/cgi-bin/bugreport.cgi
#
# Java VM: Java HotSpot(TM) Client VM (1.4.2-b28 mixed mode)
#
# Error ID: 4F533F4C494E55580E43505001C9
#

Heap at VM Abort:
Heap


****************
Another exception has been detected while we were handling last error.
Dumping information about last error:
ERROR REPORT FILE = (N/A)
PC = 0x4044fa88
SIGNAL = 11
FUNCTION NAME = (N/A)
OFFSET = 0xFFFFFFFF
LIBRARY NAME = (N/A)
Please check ERROR REPORT FILE for further information, if there is any.
Good bye.
Aborted


ERROR MESSAGES/STACK TRACES THAT OCCUR :
#
# HotSpot Virtual Machine Error, Internal Error
# Please report this error at
# http://java.sun.com/cgi-bin/bugreport.cgi
#
# Java VM: Java HotSpot(TM) Client VM (1.4.2-b28 mixed mode)
#
# Error ID: 4F533F4C494E55580E43505001C9
#

Heap at VM Abort:
Heap


****************
Another exception has been detected while we were handling last error.
Dumping information about last error:
ERROR REPORT FILE = (N/A)
PC = 0x4044fa88
SIGNAL = 11
FUNCTION NAME = (N/A)
OFFSET = 0xFFFFFFFF
LIBRARY NAME = (N/A)
Please check ERROR REPORT FILE for further information, if there is any.
Good bye.
Aborted

REPRODUCIBILITY :
This bug can be reproduced always.

CUSTOMER SUBMITTED WORKAROUND :
Set the user need to run java in adm group
(Review ID: 190208)
======================================================================

Name: rmT116609 Date: 07/28/2003


EXTRA RELEVANT SYSTEM CONFIGURATION :
the "Security level" set during the install is "higher"

A DESCRIPTION OF THE PROBLEM :
Under linux Mandrake 9.1 for the PC (with "higher" security), the java command crashes when run as a normal user (it runs fine as root). I tried it with the RPM installed as root, and I also tried it by downloading the self-extracting binary file and installing it to a user directory as that user. Same result.


STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
- Start with a Linux Mandrake 9.1 machine for the PC (i586) set to have "higher" security

- download the Java 2 SDK, Standard Edition, v.1.4.2 RPM
Install Java 2 SDK, Standard Edition, v.1.4.2 on a Linux Mandrake 9.1 machine via the RPM installer installed as root.

- install the package with the command:
rpm --install --hash --verbose j2sdk-1_4_2-linux-i586.rpmh the command:

- as a normal user, run:
/usr/java/j2sdk1.4.2/bin/java

 

EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
I was expecting to be able to run java applications, etc. via the command "java" as a normal user
ACTUAL -
The error message included under "Error Message(s)" in this report was all that was outputted

ERROR MESSAGES/STACK TRACES THAT OCCUR :
#
# HotSpot Virtual Machine Error, Internal Error
# Please report this error at
# http://java.sun.com/cgi-bin/bugreport.cgi
#
# Java VM: Java HotSpot(TM) Client VM (1.4.2-b28 mixed mode)
#
# Error ID: 4F533F4C494E55580E43505001C9
#

Heap at VM Abort:
Heap


****************
Another exception has been detected while we were handling last error.
Dumping information about last error:
ERROR REPORT FILE = (N/A)
PC = 0x48f0fa88
SIGNAL = 11
FUNCTION NAME = (N/A)
OFFSET = 0xFFFFFFFF
LIBRARY NAME = (N/A)
Please check ERROR REPORT FILE for further information, if there is any.
Good bye.
Aborted


REPRODUCIBILITY :
This bug can be reproduced always.

---------- BEGIN SOURCE ----------
Unnecessary. I wasn't able to run "java", so nothing else that depends on the JVM will run either.
---------- END SOURCE ----------

CUSTOMER SUBMITTED WORKAROUND :
Run "java" as root.
(Review ID: 192690)
======================================================================