jdk/test/sun/security/krb5/auto/unbound.ssl.policy
author msheppar
Mon, 11 Apr 2016 03:00:50 +0100
changeset 36967 d041d2e80712
parent 30038 632939157af2
permissions -rw-r--r--
8134577: Eliminate or standardize a replacement for sun.net.spi.nameservice.NameServiceDescriptor Reviewed-by: chegar, alanb
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
30038
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
     1
grant {
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
     2
    permission java.util.PropertyPermission "*", "read,write";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
     3
    permission java.net.SocketPermission "*:*", "listen,resolve,accept,connect";
36967
d041d2e80712 8134577: Eliminate or standardize a replacement for sun.net.spi.nameservice.NameServiceDescriptor
msheppar
parents: 30038
diff changeset
     4
    permission java.io.FilePermission "/-", "read";
30038
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
     5
    permission java.io.FilePermission "*", "read,write,delete";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
     6
    permission java.lang.RuntimePermission "accessDeclaredMembers";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
     7
    permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
     8
    permission java.lang.RuntimePermission "accessClassInPackage.*";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
     9
    permission javax.security.auth.AuthPermission "doAs";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    10
    permission javax.security.auth.AuthPermission "getSubject";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    11
    permission javax.security.auth.AuthPermission
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    12
                    "createLoginContext.server_star";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    13
    permission javax.security.auth.AuthPermission
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    14
                    "createLoginContext.server_multiple_principals";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    15
    permission javax.security.auth.AuthPermission "modifyPrincipals";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    16
    permission javax.security.auth.PrivateCredentialPermission "javax.security.auth.kerberos.KeyTab java.security.Principal \"krb5.keytab.data\"", "read";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    17
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    18
    // clients have a permission to use all service principals
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    19
    permission javax.security.auth.kerberos.ServicePermission "*", "initiate";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    20
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    21
    // server has a service permission
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    22
    // to accept only service1 and service3 principals
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    23
    permission javax.security.auth.kerberos.ServicePermission
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    24
                    "host/service1.localhost@TEST.REALM", "accept";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    25
    permission javax.security.auth.kerberos.ServicePermission
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    26
                    "host/service3.localhost@TEST.REALM", "accept";
632939157af2 8075007: Additional tests for krb5-related cipher suites with unbound server
asmotrak
parents:
diff changeset
    27
};