grant {

  // must allow file reads so that jtreg itself and JFR can run

  permission java.io.FilePermission "<<ALL FILES>>", "read";

  // must allow file delete so that JFR can delete repository

  permission java.io.FilePermission "<<ALL FILES>>", "delete";

  // must allow file write so that the test can create the recording

  permission java.io.FilePermission "<<ALL FILES>>", "write";

  // need to be able to create temporary files

  permission java.util.PropertyPermission "java.io.tmpdir", "read";

  permission java.util.PropertyPermission "user.dir", "read";

  // need ManagementPermission to control JFR from the test

  permission java.lang.management.ManagementPermission "control";

  permission java.lang.management.ManagementPermission "monitor";

  // JDK-8019403 - access to sun.security.util, which is needed for creation of temp files, 

  // is not permitted automatically on solaris

  permission java.lang.RuntimePermission "accessClassInPackage.sun.security.util";

};