| J. Duke | 319a3b9 | 2007-12-01 00:00:00 +0000 | [diff] [blame^] | 1 | /* |
| 2 | * security policy used by the test process |
| 3 | */ |
| 4 | |
| 5 | grant codeBase "file:${java.home}/lib/ext/*" { |
| 6 | permission java.security.AllPermission; |
| 7 | }; |
| 8 | |
| 9 | grant { |
| 10 | // Needed because of bug#: 4182104 |
| 11 | permission java.lang.RuntimePermission "modifyThreadGroup"; |
| 12 | permission java.lang.RuntimePermission "modifyThread"; |
| 13 | |
| 14 | // properties are needed because of bug#: 4179055 |
| 15 | permission java.lang.RuntimePermission "accessClassInPackage.sun.rmi.server"; |
| 16 | permission java.util.PropertyPermission "package.restrict.access.sun", "read"; |
| 17 | permission java.util.PropertyPermission "package.restrict.access.sun.rmi", "read"; |
| 18 | |
| 19 | // standard test activation permissions |
| 20 | permission java.io.FilePermission "..${/}..${/}test.props", "read"; |
| 21 | |
| 22 | // test needs to cleanup rmid's log. |
| 23 | permission java.io.FilePermission ".${/}log", "read,write,delete"; |
| 24 | permission java.io.FilePermission ".${/}log${/}-", "read,write,delete"; |
| 25 | |
| 26 | // test needs to use java to exec an rmid |
| 27 | permission java.io.FilePermission "${java.home}${/}bin${/}java", "execute"; |
| 28 | |
| 29 | // test rmid uses these properties to propagate security values to rmid |
| 30 | permission java.util.PropertyPermission "java.security.policy", "read"; |
| 31 | permission java.util.PropertyPermission "java.security.manager", "read"; |
| 32 | |
| 33 | // used by TestLibrary to determine test environment |
| 34 | permission java.util.PropertyPermission "test.classes", "read"; |
| 35 | permission java.util.PropertyPermission "test.src", "read"; |
| 36 | permission java.util.PropertyPermission "user.dir", "read"; |
| 37 | permission java.util.PropertyPermission "java.home", "read"; |
| 38 | |
| 39 | // Needed to create an activation group |
| 40 | permission java.lang.RuntimePermission "setFactory"; |
| 41 | |
| 42 | // allow exporting of remote objects on an arbitrary port. |
| 43 | permission java.net.SocketPermission "*:1024-", "connect,accept,listen"; |
| 44 | }; |