# HG changeset patch
# User mullan
# Date 1475685361 14400
# Node ID 4bd1181b2feaac7709c663188783b3b23dc32110
# Parent  910288d26d83dded100ca30ebb78ed2ac5ee4fce
8166632: Document how to grant permissions for a module jrt:/<module> in the image
Reviewed-by: alanb, mchung

diff -r 910288d26d83 -r 4bd1181b2fea jdk/src/java.base/share/conf/security/java.policy
--- a/jdk/src/java.base/share/conf/security/java.policy	Wed Oct 05 10:49:49 2016 +0200
+++ b/jdk/src/java.base/share/conf/security/java.policy	Wed Oct 05 12:36:01 2016 -0400
@@ -1,5 +1,18 @@
+//
+// This system policy file grants a set of default permissions to all domains
+// and can be configured to grant additional permissions to modules and other
+// code sources. The code source URL scheme for modules linked into a
+// run-time image is "jrt".
+//
+// For example, to grant permission to read the "foo" property to the module
+// "com.greetings", the grant entry is:
+//
+// grant codeBase "jrt:/com.greetings" {
+//     permission java.util.PropertyPermission "foo", "read";
+// };
+//
+
 // default permissions granted to all domains
-
 grant {
     // allows anyone to listen on dynamic ports
     permission java.net.SocketPermission "localhost:0", "listen";