64 lines
3.0 KiB
Plaintext
64 lines
3.0 KiB
Plaintext
grant {
|
|
// java.base module
|
|
permission java.io.SerializablePermission "enableSubstitution";
|
|
permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
|
|
permission java.nio.file.LinkPermission "hard";
|
|
permission javax.net.ssl.SSLPermission "getSSLSessionContext";
|
|
permission javax.security.auth.AuthPermission "doAsPrivileged";
|
|
permission javax.security.auth.PrivateCredentialPermission "* * \"*\"",
|
|
"read";
|
|
// java.base module (@jdk.Exported Permissions)
|
|
permission jdk.net.NetworkPermission "setOption.SO_FLOW_SLA";
|
|
// java.desktop module
|
|
permission java.awt.AWTPermission "createRobot";
|
|
permission javax.sound.sampled.AudioPermission "play";
|
|
// java.logging module
|
|
permission java.util.logging.LoggingPermission "control", "";
|
|
// java.management module
|
|
permission java.lang.management.ManagementPermission "control";
|
|
permission javax.management.MBeanPermission "*", "getAttribute";
|
|
permission javax.management.MBeanServerPermission "createMBeanServer";
|
|
permission javax.management.MBeanTrustPermission "register";
|
|
permission javax.management.remote.SubjectDelegationPermission "*";
|
|
// java.security.jgss module
|
|
permission javax.security.auth.kerberos.DelegationPermission "\"*\" \"*\"";
|
|
permission javax.security.auth.kerberos.ServicePermission "*", "accept";
|
|
// java.sql module
|
|
permission java.sql.SQLPermission "setLog";
|
|
// java.smartcardio module
|
|
permission javax.smartcardio.CardPermission "*", "*";
|
|
// jdk.attach module (@jdk.Exported Permissions)
|
|
permission com.sun.tools.attach.AttachPermission "attachVirtualMachine";
|
|
// jdk.jdi module (@jdk.Exported Permissions)
|
|
permission com.sun.jdi.JDIPermission "virtualMachineManager";
|
|
// jdk.security.jgss module (@jdk.Exported Permissions)
|
|
permission com.sun.security.jgss.InquireSecContextPermission "*";
|
|
};
|
|
|
|
grant
|
|
// java.base module
|
|
principal javax.security.auth.x500.X500Principal "CN=Duke",
|
|
// java.management module
|
|
principal javax.management.remote.JMXPrincipal "Duke",
|
|
// java.security.jgss module
|
|
principal javax.security.auth.kerberos.KerberosPrincipal "duke@openjdk.org",
|
|
// jdk.security.auth module (@jdk.Exported Principals)
|
|
principal com.sun.security.auth.UserPrincipal "Duke",
|
|
principal com.sun.security.auth.NTDomainPrincipal "openjdk.org",
|
|
principal com.sun.security.auth.NTSid
|
|
"S-1-5-21-3623811015-3361044348-30300820-1013",
|
|
principal com.sun.security.auth.NTUserPrincipal "Duke",
|
|
principal com.sun.security.auth.UnixNumericUserPrincipal "0",
|
|
principal com.sun.security.auth.UnixPrincipal "duke" {
|
|
permission java.util.PropertyPermission "user.home", "read";
|
|
};
|
|
|
|
grant
|
|
// java.security.jgss module
|
|
principal javax.security.auth.kerberos.KerberosPrincipal "duke@openjdk.org"
|
|
{
|
|
// test that ${{self}} expansion works
|
|
permission javax.security.auth.kerberos.ServicePermission "${{self}}",
|
|
"accept";
|
|
};
|