jdk/test/sun/security/pkcs11/KeyStore/Basic.policy
author valeriep
Thu, 10 Jul 2014 22:44:58 +0000
changeset 25408 27563093d2d2
parent 2 90ce3da70b43
child 27260 8d82d0e9556b
permissions -rw-r--r--
8043406: Change default policy for JCE providers to run with as few privileges as possible Summary: Provide default permissions for crypto providers Reviewed-by: mullan, vinnie
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
25408
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
     1
grant codeBase "file:${java.home}/lib/ext/sunpkcs11.jar" {
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
     2
        permission java.lang.RuntimePermission "accessClassInPackage.sun.security.*";
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
     3
        permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.ch";
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
     4
        permission java.lang.RuntimePermission "loadLibrary.j2pkcs11";
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
     5
        permission java.util.PropertyPermission "*", "read";
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
     6
        permission java.security.SecurityPermission "putProviderProperty.*";
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
     7
        permission java.security.SecurityPermission "clearProviderProperties.*";
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
     8
        permission java.security.SecurityPermission "removeProviderProperty.*";
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
     9
        permission java.security.SecurityPermission "getProperty.auth.login.defaultCallbackHandler";
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
    10
        permission java.security.SecurityPermission "authProvider.*";
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
    11
        // Needed for reading PKCS11 config file and NSS library check
27563093d2d2 8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents: 2
diff changeset
    12
        permission java.io.FilePermission "<<ALL FILES>>", "read";
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    13
};
90ce3da70b43 Initial load
duke
parents:
diff changeset
    14
90ce3da70b43 Initial load
duke
parents:
diff changeset
    15
grant codebase "file:${user.dir}${/}loader.jar" {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    16
    permission java.security.AllPermission;
90ce3da70b43 Initial load
duke
parents:
diff changeset
    17
};
90ce3da70b43 Initial load
duke
parents:
diff changeset
    18
90ce3da70b43 Initial load
duke
parents:
diff changeset
    19
grant {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    20
    permission java.util.PropertyPermission "*", "read,write";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    21
    permission java.lang.RuntimePermission "loadLibrary.*";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    22
    permission java.lang.RuntimePermission "accessClassInPackage.sun.*";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    23
    permission java.lang.RuntimePermission "getProtectionDomain";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    24
    permission java.security.SecurityPermission "putProviderProperty.*";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    25
90ce3da70b43 Initial load
duke
parents:
diff changeset
    26
    permission java.io.FilePermission "<<ALL FILES>>", "read";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    27
    permission java.security.SecurityPermission "setProperty.auth.login.defaultCallbackHandler";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    28
    permission java.security.SecurityPermission "authProvider.SunPKCS11-ibutton";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    29
    permission java.security.SecurityPermission "authProvider.SunPKCS11-activcard";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    30
    permission java.security.SecurityPermission "authProvider.SunPKCS11-nss";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    31
    permission java.security.SecurityPermission "authProvider.SunPKCS11-Solaris";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    32
    permission java.security.SecurityPermission "authProvider.SunPKCS11-sca1000";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    33
90ce3da70b43 Initial load
duke
parents:
diff changeset
    34
    // for 'module' test
90ce3da70b43 Initial load
duke
parents:
diff changeset
    35
    permission java.lang.RuntimePermission "accessClassInPackage.sun.*";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    36
    permission javax.security.auth.AuthPermission "modifyPrincipals";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    37
    permission javax.security.auth.AuthPermission "modifyPublicCredentials";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    38
    permission javax.security.auth.AuthPermission "modifyPrivateCredentials";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    39
    permission javax.security.auth.PrivateCredentialPermission "javax.security.auth.x500.X500PrivateCredential * \"*\"", "read";
90ce3da70b43 Initial load
duke
parents:
diff changeset
    40
};