efa54ce543
Provide default permissions for crypto providers Reviewed-by: mullan, vinnie
36 lines
1.4 KiB
Plaintext
36 lines
1.4 KiB
Plaintext
/*
|
|
* security policy used by the test process
|
|
*/
|
|
|
|
grant {
|
|
// standard test activation permissions
|
|
permission java.io.FilePermission "..${/}..${/}test.props", "read";
|
|
|
|
// test needs to cleanup rmid's log.
|
|
permission java.io.FilePermission ".${/}log", "read,write,delete";
|
|
permission java.io.FilePermission ".${/}log${/}-", "read,write,delete";
|
|
|
|
// test needs to use java to exec an rmid
|
|
permission java.io.FilePermission "${java.home}${/}bin${/}java", "execute";
|
|
|
|
// test rmid uses these properties to propagate security values to rmid
|
|
permission java.util.PropertyPermission "java.security.policy", "read";
|
|
permission java.util.PropertyPermission "java.security.manager", "read";
|
|
|
|
// used by TestLibrary to determine test environment
|
|
permission java.util.PropertyPermission "test.*", "read";
|
|
permission java.util.PropertyPermission "user.dir", "read";
|
|
permission java.util.PropertyPermission "java.home", "read";
|
|
permission java.util.PropertyPermission "java.rmi.activation.port", "write";
|
|
|
|
// Needed to create an activation group
|
|
permission java.lang.RuntimePermission "setFactory";
|
|
|
|
// allow exporting of remote objects on an arbitrary port.
|
|
permission java.net.SocketPermission "*:1024-", "connect,accept,listen";
|
|
|
|
// allow exporting object with non-public remote interface
|
|
permission java.rmi.RMIPermission "exportRemoteInterface.ActivateMe";
|
|
|
|
};
|