author | chegar |
Sun, 17 Aug 2014 15:54:13 +0100 | |
changeset 25859 | 3317bb8137f4 |
parent 25408 | jdk/src/share/lib/security/java.policy@27563093d2d2 |
child 27182 | 4525d13b8af1 |
permissions | -rw-r--r-- |
24364
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
1 |
// permissions required by each component |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
2 |
grant codeBase "file:${java.home}/lib/ext/zipfs.jar" { |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
3 |
permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete"; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
4 |
permission java.lang.RuntimePermission "fileSystemProvider"; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
5 |
permission java.util.PropertyPermission "*", "read"; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
6 |
}; |
2 | 7 |
|
24364
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
8 |
grant codeBase "file:${java.home}/lib/ext/cldrdata.jar" { |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
9 |
permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*"; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
10 |
permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*"; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
11 |
permission java.util.PropertyPermission "*", "read"; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
12 |
}; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
13 |
|
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
14 |
grant codeBase "file:${java.home}/lib/ext/localedata.jar" { |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
15 |
permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*"; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
16 |
permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*"; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
17 |
permission java.util.PropertyPermission "*", "read"; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
18 |
}; |
2 | 19 |
|
24364
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
20 |
grant codeBase "file:${java.home}/lib/ext/dnsns.jar" { |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
21 |
permission java.security.AllPermission; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
22 |
}; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
23 |
|
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
24 |
grant codeBase "file:${java.home}/lib/ext/nashorn.jar" { |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
25 |
permission java.security.AllPermission; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
26 |
}; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
27 |
|
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
28 |
grant codeBase "file:${java.home}/lib/ext/sunec.jar" { |
25408
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
29 |
permission java.lang.RuntimePermission "accessClassInPackage.sun.security.*"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
30 |
permission java.lang.RuntimePermission "loadLibrary.sunec"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
31 |
permission java.util.PropertyPermission "*", "read"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
32 |
permission java.security.SecurityPermission "putProviderProperty.SunEC"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
33 |
permission java.security.SecurityPermission "clearProviderProperties.SunEC"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
34 |
permission java.security.SecurityPermission "removeProviderProperty.SunEC"; |
24364
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
35 |
}; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
36 |
|
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
37 |
grant codeBase "file:${java.home}/lib/ext/sunjce_provider.jar" { |
25408
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
38 |
permission java.lang.RuntimePermission "accessClassInPackage.sun.misc"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
39 |
permission java.lang.RuntimePermission "accessClassInPackage.sun.security.*"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
40 |
permission java.util.PropertyPermission "*", "read"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
41 |
permission java.security.SecurityPermission "putProviderProperty.SunJCE"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
42 |
permission java.security.SecurityPermission "clearProviderProperties.SunJCE"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
43 |
permission java.security.SecurityPermission "removeProviderProperty.SunJCE"; |
24364
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
44 |
}; |
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
45 |
|
da8afb112f5d
8040059: Change default policy for extensions to no permission
mchung
parents:
22339
diff
changeset
|
46 |
grant codeBase "file:${java.home}/lib/ext/sunpkcs11.jar" { |
25408
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
47 |
permission java.lang.RuntimePermission "accessClassInPackage.sun.security.*"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
48 |
permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.ch"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
49 |
permission java.lang.RuntimePermission "loadLibrary.j2pkcs11"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
50 |
// needs "security.pkcs11.allowSingleThreadedModules" |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
51 |
permission java.util.PropertyPermission "*", "read"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
52 |
permission java.security.SecurityPermission "putProviderProperty.*"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
53 |
permission java.security.SecurityPermission "clearProviderProperties.*"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
54 |
permission java.security.SecurityPermission "removeProviderProperty.*"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
55 |
permission java.security.SecurityPermission "getProperty.auth.login.defaultCallbackHandler"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
56 |
permission java.security.SecurityPermission "authProvider.*"; |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
57 |
// Needed for reading PKCS11 config file and NSS library check |
27563093d2d2
8043406: Change default policy for JCE providers to run with as few privileges as possible
valeriep
parents:
24364
diff
changeset
|
58 |
permission java.io.FilePermission "<<ALL FILES>>", "read"; |
2 | 59 |
}; |
60 |
||
61 |
// default permissions granted to all domains |
|
62 |
||
22339 | 63 |
grant { |
64 |
// Allows any thread to stop itself using the java.lang.Thread.stop() |
|
65 |
// method that takes no argument. |
|
66 |
// Note that this permission is granted by default only to remain |
|
67 |
// backwards compatible. |
|
68 |
// It is strongly recommended that you either remove this permission |
|
69 |
// from this policy file or further restrict it to code sources |
|
70 |
// that you specify, because Thread.stop() is potentially unsafe. |
|
71 |
// See the API specification of java.lang.Thread.stop() for more |
|
2183
8eb97a6368b8
6787130: java.policy file contains stale link to http://java.sun.com/notes
mullan
parents:
2
diff
changeset
|
72 |
// information. |
22339 | 73 |
permission java.lang.RuntimePermission "stopThread"; |
2 | 74 |
|
22339 | 75 |
// allows anyone to listen on dynamic ports |
76 |
permission java.net.SocketPermission "localhost:0", "listen"; |
|
2 | 77 |
|
22339 | 78 |
// "standard" properies that can be read by anyone |
2 | 79 |
|
22339 | 80 |
permission java.util.PropertyPermission "java.version", "read"; |
81 |
permission java.util.PropertyPermission "java.vendor", "read"; |
|
82 |
permission java.util.PropertyPermission "java.vendor.url", "read"; |
|
83 |
permission java.util.PropertyPermission "java.class.version", "read"; |
|
84 |
permission java.util.PropertyPermission "os.name", "read"; |
|
85 |
permission java.util.PropertyPermission "os.version", "read"; |
|
86 |
permission java.util.PropertyPermission "os.arch", "read"; |
|
87 |
permission java.util.PropertyPermission "file.separator", "read"; |
|
88 |
permission java.util.PropertyPermission "path.separator", "read"; |
|
89 |
permission java.util.PropertyPermission "line.separator", "read"; |
|
2 | 90 |
|
22339 | 91 |
permission java.util.PropertyPermission "java.specification.version", "read"; |
92 |
permission java.util.PropertyPermission "java.specification.vendor", "read"; |
|
93 |
permission java.util.PropertyPermission "java.specification.name", "read"; |
|
2 | 94 |
|
22339 | 95 |
permission java.util.PropertyPermission "java.vm.specification.version", "read"; |
96 |
permission java.util.PropertyPermission "java.vm.specification.vendor", "read"; |
|
97 |
permission java.util.PropertyPermission "java.vm.specification.name", "read"; |
|
98 |
permission java.util.PropertyPermission "java.vm.version", "read"; |
|
99 |
permission java.util.PropertyPermission "java.vm.vendor", "read"; |
|
100 |
permission java.util.PropertyPermission "java.vm.name", "read"; |
|
2 | 101 |
}; |
102 |