stan/jdk-24
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

8154191: Deprivilege java.smartcardio module

Browse Source 
Updated java.policy with the entry for java.smartcardio module

Reviewed-by: mullan, mchung
This commit is contained in:
Valerie Peng 2016-06-15 23:24:08 +00:00
parent ccf113da6d
commit c1c5618ddd
2 changed files with 13 additions and 1 deletions
jdk
src/java.base/share/conf/security
java.policy
test/javax/smartcardio
TerminalFactorySpiTest.java

12
jdk/src/java.base/share/conf/security/java.policy

@ -100,6 +100,18 @@ grant codeBase "jrt:/jdk.scripting.nashorn.shell" {
permission java.security.AllPermission;
};
grant codeBase "jrt:/java.smartcardio" {
permission javax.smartcardio.CardPermission "*", "*";
permission java.lang.RuntimePermission "loadLibrary.j2pcsc";
permission java.lang.RuntimePermission "accessClassInPackage.sun.security.*";
permission java.util.PropertyPermission "*", "read";
// needed for looking up native PC/SC library
permission java.io.FilePermission "<<ALL FILES>>","read";
permission java.security.SecurityPermission "putProviderProperty.SunPCSC";
permission java.security.SecurityPermission "clearProviderProperties.SunPCSC";
permission java.security.SecurityPermission "removeProviderProperty.SunPCSC";
};
grant codeBase "jrt:/java.xml.bind" {
permission java.lang.RuntimePermission "accessClassInPackage.com.sun.xml.internal.*";
permission java.lang.RuntimePermission "accessClassInPackage.com.sun.istack.internal";

2
jdk/test/javax/smartcardio/TerminalFactorySpiTest.java

@ -26,7 +26,7 @@
* @bug 8049021
* @summary Test if we can write new provider for smart card
* @compile -addmods java.smartcardio TerminalFactorySpiTest.java
* @run main/othervm/policy=policy -addmods java.smartcardio TerminalFactorySpiTest
* @run main/othervm/java.security.policy=policy -addmods java.smartcardio TerminalFactorySpiTest
*/
import java.security.Provider;
import java.security.Security;