[JIRA] (IDP-1973) Don't traverse directories under conf/ that is forbidden by permission

[Takeshi Nishimura (Jira)]

Takeshi Nishimura ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5d11c773965f500bce57d7b3 ) *created* an issue

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiNDk3MWUwNTk2YjczNDM1NmFlNGI2Y2ZhYzdlZmY1ODQiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/IDP-1973?atlOrigin=eyJpIjoiNDk3MWUwNTk2YjczNDM1NmFlNGI2Y2ZhYzdlZmY1ODQiLCJwIjoiaiJ9 ) IDP-1973 ( https://shibboleth.atlassian.net/browse/IDP-1973?atlOrigin=eyJpIjoiNDk3MWUwNTk2YjczNDM1NmFlNGI2Y2ZhYzdlZmY1ODQiLCJwIjoiaiJ9 ) Don't traverse directories under conf/ that is forbidden by permission ( https://shibboleth.atlassian.net/browse/IDP-1973?atlOrigin=eyJpIjoiNDk3MWUwNTk2YjczNDM1NmFlNGI2Y2ZhYzdlZmY1ODQiLCJwIjoiaiJ9 )

Issue Type: Bug Assignee: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) Components: Configuration Created: 13/Jul/22 10:31 PM Priority: Trivial Reporter: Takeshi Nishimura ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5d11c773965f500bce57d7b3 )

We have an error when conf/ has a secret directory which is not relevant to Shibboleth IdP configuration. Please ignore such directories.

2022-06-23 20:03:58,540 - WARN [org.eclipse.jetty.webapp.WebAppContext:533] - Failed startup of context o.e.j.w.WebAppContext at 15888343{Shibboleth Identity Provider,/idp,[file:///opt/jetty-base/tmp/jetty-127_0_0_1-8080-idp_war-_idp-any-284233952389360321/webinf/, jar:file:///opt/shibboleth-idp/war/idp.war!/],UNAVAILABLE}{/opt/shibboleth-idp/war/idp.war}
java.io.UncheckedIOException: java.nio.file.AccessDeniedException: /opt/shibboleth-idp/conf/.git/refs
       at java.base/java.nio.file.FileTreeIterator.fetchNextIfNeeded(FileTreeIterator.java:87)
       at java.base/java.nio.file.FileTreeIterator.hasNext(FileTreeIterator.java:103)
       at java.base/java.util.Iterator.forEachRemaining(Iterator.java:132)
       at java.base/java.util.Spliterators$IteratorSpliterator.forEachRemaining(Spliterators.java:1801)
       at java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484)
       at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474)
       at java.base/java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913)
       at java.base/java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234)
       at java.base/java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578)
       at net.shibboleth.idp.spring.IdPPropertiesApplicationContextInitializer.getAdditionalSources(IdPPropertiesApplicationContextInitializer.java:240)
       at net.shibboleth.idp.spring.IdPPropertiesApplicationContextInitializer.loadAdditionalPropertySources(IdPPropertiesApplicationContextInitializer.java:275)
       at net.shibboleth.idp.spring.IdPPropertiesApplicationContextInitializer.initialize(IdPPropertiesApplicationContextInitializer.java:137)

( https://shibboleth.atlassian.net/browse/IDP-1973#add-comment?atlOrigin=eyJpIjoiNDk3MWUwNTk2YjczNDM1NmFlNGI2Y2ZhYzdlZmY1ODQiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1973#add-comment?atlOrigin=eyJpIjoiNDk3MWUwNTk2YjczNDM1NmFlNGI2Y2ZhYzdlZmY1ODQiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100202- sha1:e905ae5 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220714/e9098ccf/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-f5e7829e-93a0-4fdb-9e3d-afd2d436e89b
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220714/e9098ccf/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-7cd3c6e6-1dba-4843-80f3-31a2b41eadb4
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220714/e9098ccf/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-800fbee4-d002-440d-875b-49d086923934
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220714/e9098ccf/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-5cf0d446-9d58-4cf9-a7db-e6af6680527e
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220714/e9098ccf/attachment-0007.png>