src/java.base/share/lib/security/default.policy
author tschatzl
Thu, 06 Dec 2018 13:55:22 +0100
changeset 52874 c45a5b46461b
parent 51929 0e514f1549b4
child 53257 5170dc2bcf64
child 53292 8065db7231ae
permissions -rw-r--r--
8193312: Rename VM_CGC_Operation to VM_G1Concurrent Reviewed-by: pliden, sjohanss, jgeorge
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     1
//
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     2
// Permissions required by modules stored in a run-time image and loaded
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     3
// by the platform class loader.
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     4
//
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     5
// NOTE that this file is not intended to be modified. If additional
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     6
// permissions need to be granted to the modules in this file, it is
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     7
// recommended that they be configured in a separate policy file or
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     8
// ${java.home}/conf/security/java.policy.
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
     9
//
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    10
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    11
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    12
grant codeBase "jrt:/java.compiler" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    13
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    14
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    15
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    16
49765
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    17
grant codeBase "jrt:/java.net.http" {
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    18
    permission java.lang.RuntimePermission "accessClassInPackage.sun.net";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    19
    permission java.lang.RuntimePermission "accessClassInPackage.sun.net.util";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    20
    permission java.lang.RuntimePermission "accessClassInPackage.sun.net.www";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    21
    permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.misc";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    22
    permission java.net.SocketPermission "*","connect,resolve";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    23
    permission java.net.URLPermission "http:*","*:*";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    24
    permission java.net.URLPermission "https:*","*:*";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    25
    permission java.net.URLPermission "ws:*","*:*";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    26
    permission java.net.URLPermission "wss:*","*:*";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    27
    permission java.net.URLPermission "socket:*","CONNECT";  // proxy
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    28
    // For request/response body processors, fromFile, asFile
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    29
    permission java.io.FilePermission "<<ALL FILES>>","read,write,delete";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    30
    permission java.util.PropertyPermission "*","read";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    31
    permission java.net.NetPermission "getProxySelector";
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    32
};
ee6f7a61f3a5 8197564: HTTP Client implementation
chegar
parents: 48841
diff changeset
    33
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    34
grant codeBase "jrt:/java.scripting" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    35
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    36
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    37
39885
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
    38
grant codeBase "jrt:/java.security.jgss" {
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
    39
    permission java.security.AllPermission;
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
    40
};
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
    41
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    42
grant codeBase "jrt:/java.smartcardio" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    43
    permission javax.smartcardio.CardPermission "*", "*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    44
    permission java.lang.RuntimePermission "loadLibrary.j2pcsc";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    45
    permission java.lang.RuntimePermission
41812
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    46
                   "accessClassInPackage.sun.security.jca";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    47
    permission java.lang.RuntimePermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    48
                   "accessClassInPackage.sun.security.util";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    49
    permission java.util.PropertyPermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    50
                   "javax.smartcardio.TerminalFactory.DefaultType", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    51
    permission java.util.PropertyPermission "os.name", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    52
    permission java.util.PropertyPermission "os.arch", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    53
    permission java.util.PropertyPermission "sun.arch.data.model", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    54
    permission java.util.PropertyPermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    55
                   "sun.security.smartcardio.library", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    56
    permission java.util.PropertyPermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    57
                   "sun.security.smartcardio.t0GetResponse", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    58
    permission java.util.PropertyPermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    59
                   "sun.security.smartcardio.t1GetResponse", "read";
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    60
    permission java.util.PropertyPermission
16d830c87e7b 8168851: Tighten permissions granted to the java.smartcardio module
mullan
parents: 41603
diff changeset
    61
                   "sun.security.smartcardio.t1StripLe", "read";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    62
    // needed for looking up native PC/SC library
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    63
    permission java.io.FilePermission "<<ALL FILES>>","read";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    64
    permission java.security.SecurityPermission "putProviderProperty.SunPCSC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    65
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    66
                   "clearProviderProperties.SunPCSC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    67
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    68
                   "removeProviderProperty.SunPCSC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    69
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    70
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    71
grant codeBase "jrt:/java.sql" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    72
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    73
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    74
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    75
grant codeBase "jrt:/java.sql.rowset" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    76
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    77
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    78
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    79
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    80
grant codeBase "jrt:/java.xml.crypto" {
43206
4c18d1166944 8140353: Improve signature checking
mullan
parents: 42693
diff changeset
    81
    permission java.lang.RuntimePermission
4c18d1166944 8140353: Improve signature checking
mullan
parents: 42693
diff changeset
    82
                   "accessClassInPackage.sun.security.util";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    83
    permission java.util.PropertyPermission "*", "read";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    84
    permission java.security.SecurityPermission "putProviderProperty.XMLDSig";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    85
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    86
                   "clearProviderProperties.XMLDSig";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    87
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    88
                   "removeProviderProperty.XMLDSig";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    89
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    90
                   "com.sun.org.apache.xml.internal.security.register";
40551
05eba5515cbb 8151893: Add security property to configure XML Signature secure validation mode
mullan
parents: 39885
diff changeset
    91
    permission java.security.SecurityPermission
05eba5515cbb 8151893: Add security property to configure XML Signature secure validation mode
mullan
parents: 39885
diff changeset
    92
                   "getProperty.jdk.xml.dsig.secureValidationPolicy";
43221
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    93
    permission java.lang.RuntimePermission
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    94
                   "accessClassInPackage.com.sun.org.apache.xml.internal.*";
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    95
    permission java.lang.RuntimePermission
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    96
                   "accessClassInPackage.com.sun.org.apache.xpath.internal";
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    97
    permission java.lang.RuntimePermission
eef9383d25cb 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default
mullan
parents: 43206
diff changeset
    98
                   "accessClassInPackage.com.sun.org.apache.xpath.internal.*";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
    99
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   100
45640
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   101
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   102
grant codeBase "jrt:/jdk.accessibility" {
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   103
    permission java.lang.RuntimePermission "accessClassInPackage.sun.awt";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   104
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   105
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   106
grant codeBase "jrt:/jdk.charsets" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   107
    permission java.util.PropertyPermission "os.name", "read";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   108
    permission java.util.PropertyPermission "sun.nio.cs.map", "read";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   109
    permission java.lang.RuntimePermission "charsetProvider";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   110
    permission java.lang.RuntimePermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   111
                   "accessClassInPackage.jdk.internal.misc";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   112
    permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.cs";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   113
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   114
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   115
grant codeBase "jrt:/jdk.crypto.ec" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   116
    permission java.lang.RuntimePermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   117
                   "accessClassInPackage.sun.security.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   118
    permission java.lang.RuntimePermission "loadLibrary.sunec";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   119
    permission java.security.SecurityPermission "putProviderProperty.SunEC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   120
    permission java.security.SecurityPermission "clearProviderProperties.SunEC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   121
    permission java.security.SecurityPermission "removeProviderProperty.SunEC";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   122
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   123
43248
5e15de85a1a0 8172527: Rename jdk.crypto.token to jdk.crypto.cryptoki
ascarpino
parents: 43245
diff changeset
   124
grant codeBase "jrt:/jdk.crypto.cryptoki" {
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   125
    permission java.lang.RuntimePermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   126
                   "accessClassInPackage.sun.security.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   127
    permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.ch";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   128
    permission java.lang.RuntimePermission "loadLibrary.j2pkcs11";
41603
bb9d97b4c21b 8168313: Tighten permissions granted to jdk.crypto.pkcs11 module
mullan
parents: 41556
diff changeset
   129
    permission java.util.PropertyPermission "sun.security.pkcs11.allowSingleThreadedModules", "read";
bb9d97b4c21b 8168313: Tighten permissions granted to jdk.crypto.pkcs11 module
mullan
parents: 41556
diff changeset
   130
    permission java.util.PropertyPermission "os.name", "read";
bb9d97b4c21b 8168313: Tighten permissions granted to jdk.crypto.pkcs11 module
mullan
parents: 41556
diff changeset
   131
    permission java.util.PropertyPermission "os.arch", "read";
48580
d4898fde8171 8185292: Stricter key generation
apetcher
parents: 48130
diff changeset
   132
    permission java.util.PropertyPermission "jdk.crypto.KeyAgreement.legacyKDF", "read";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   133
    permission java.security.SecurityPermission "putProviderProperty.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   134
    permission java.security.SecurityPermission "clearProviderProperties.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   135
    permission java.security.SecurityPermission "removeProviderProperty.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   136
    permission java.security.SecurityPermission
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   137
                   "getProperty.auth.login.defaultCallbackHandler";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   138
    permission java.security.SecurityPermission "authProvider.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   139
    // Needed for reading PKCS11 config file and NSS library check
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   140
    permission java.io.FilePermission "<<ALL FILES>>", "read";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   141
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   142
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   143
grant codeBase "jrt:/jdk.dynalink" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   144
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   145
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   146
47267
b3a91921bafc 8159526: Deprivilege jdk.httpserver
vtewari
parents: 47216
diff changeset
   147
grant codeBase "jrt:/jdk.httpserver" {
b3a91921bafc 8159526: Deprivilege jdk.httpserver
vtewari
parents: 47216
diff changeset
   148
    permission java.security.AllPermission;
b3a91921bafc 8159526: Deprivilege jdk.httpserver
vtewari
parents: 47216
diff changeset
   149
};
b3a91921bafc 8159526: Deprivilege jdk.httpserver
vtewari
parents: 47216
diff changeset
   150
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   151
grant codeBase "jrt:/jdk.internal.le" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   152
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   153
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   154
45640
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   155
grant codeBase "jrt:/jdk.internal.vm.compiler" {
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   156
    permission java.security.AllPermission;
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   157
};
b35c4c2cada2 8182137: Missing permissions in deprivileged java.xml.bind and java.xml.ws modules
mchung
parents: 43996
diff changeset
   158
47595
bb0c5c1a2785 8188775: Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.hotspot
kvn
parents: 47267
diff changeset
   159
grant codeBase "jrt:/jdk.internal.vm.compiler.management" {
48130
998c88ae423a 8189116: Give the jdk.internal.vm.compiler.management only the permissions it really needs to expose the bean
jtulach
parents: 47595
diff changeset
   160
    permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.hotspot";
998c88ae423a 8189116: Give the jdk.internal.vm.compiler.management only the permissions it really needs to expose the bean
jtulach
parents: 47595
diff changeset
   161
    permission java.lang.RuntimePermission "accessClassInPackage.jdk.vm.ci.runtime";
998c88ae423a 8189116: Give the jdk.internal.vm.compiler.management only the permissions it really needs to expose the bean
jtulach
parents: 47595
diff changeset
   162
    permission java.lang.RuntimePermission "accessClassInPackage.sun.management.spi";
998c88ae423a 8189116: Give the jdk.internal.vm.compiler.management only the permissions it really needs to expose the bean
jtulach
parents: 47595
diff changeset
   163
    permission java.lang.RuntimePermission "sun.management.spi.PlatformMBeanProvider.subclass";
47595
bb0c5c1a2785 8188775: Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.hotspot
kvn
parents: 47267
diff changeset
   164
};
bb0c5c1a2785 8188775: Module jdk.internal.vm.compiler.management has not been granted accessClassInPackage.org.graalvm.compiler.hotspot
kvn
parents: 47267
diff changeset
   165
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   166
grant codeBase "jrt:/jdk.jsobject" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   167
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   168
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   169
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   170
grant codeBase "jrt:/jdk.localedata" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   171
    permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   172
    permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   173
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   174
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   175
grant codeBase "jrt:/jdk.naming.dns" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   176
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   177
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   178
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   179
grant codeBase "jrt:/jdk.scripting.nashorn" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   180
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   181
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   182
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   183
grant codeBase "jrt:/jdk.scripting.nashorn.shell" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   184
    permission java.security.AllPermission;
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   185
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   186
39885
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   187
grant codeBase "jrt:/jdk.security.auth" {
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   188
    permission java.security.AllPermission;
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   189
};
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   190
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   191
grant codeBase "jrt:/jdk.security.jgss" {
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   192
    permission java.security.AllPermission;
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   193
};
5b01da2e0368 8159528: Deprivilege java.security.jgss, jdk.security.jgss and jdk.security.auth
weijun
parents: 39884
diff changeset
   194
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   195
grant codeBase "jrt:/jdk.zipfs" {
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   196
    permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   197
    permission java.lang.RuntimePermission "fileSystemProvider";
41959
3b3918911a15 8168862: Tighten permissions granted to the jdk.zipfs module
sherman
parents: 41812
diff changeset
   198
    permission java.util.PropertyPermission "os.name", "read";
39884
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   199
};
9a543219d0bb 8159752: Grant de-privileged module permissions by default with java.security.policy override option
mullan
parents:
diff changeset
   200
43245
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   201
// permissions needed by applications using java.desktop module
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   202
grant {
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   203
    permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans";
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   204
    permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans.*";
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   205
    permission java.lang.RuntimePermission "accessClassInPackage.com.sun.java.swing.plaf.*";
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   206
    permission java.lang.RuntimePermission "accessClassInPackage.com.apple.*";
bc7dea80c4d0 8173082: java/bean/* tests fail since change of JDK-8055206
mullan
parents: 43221
diff changeset
   207
};