db4d383614
Initial integration of JEP 200, JEP 260, JEP 261, and JEP 282 Co-authored-by: Alex Buckley <alex.buckley@oracle.com> Co-authored-by: Jonathan Gibbons <jonathan.gibbons@oracle.com> Co-authored-by: Karen Kinnear <karen.kinnear@oracle.com> Co-authored-by: Mandy Chung <mandy.chung@oracle.com> Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com> Co-authored-by: Chris Hegarty <chris.hegarty@oracle.com> Co-authored-by: Alexandr Scherbatiy <alexandr.scherbatiy@oracle.com> Co-authored-by: Amy Lu <amy.lu@oracle.com> Co-authored-by: Calvin Cheung <calvin.cheung@oracle.com> Co-authored-by: Daniel Fuchs <daniel.fuchs@oracle.com> Co-authored-by: Erik Joelsson <erik.joelsson@oracle.com> Co-authored-by: Harold Seigel <harold.seigel@oracle.com> Co-authored-by: Jaroslav Bachorik <jaroslav.bachorik@oracle.com> Co-authored-by: Jean-Francois Denise <jean-francois.denise@oracle.com> Co-authored-by: Jan Lahoda <jan.lahoda@oracle.com> Co-authored-by: James Laskey <james.laskey@oracle.com> Co-authored-by: Lois Foltan <lois.foltan@oracle.com> Co-authored-by: Miroslav Kos <miroslav.kos@oracle.com> Co-authored-by: Huaming Li <huaming.li@oracle.com> Co-authored-by: Sean Mullan <sean.mullan@oracle.com> Co-authored-by: Naoto Sato <naoto.sato@oracle.com> Co-authored-by: Masayoshi Okutsu <masayoshi.okutsu@oracle.com> Co-authored-by: Peter Levart <peter.levart@gmail.com> Co-authored-by: Philip Race <philip.race@oracle.com> Co-authored-by: Claes Redestad <claes.redestad@oracle.com> Co-authored-by: Sergey Bylokhov <sergey.bylokhov@oracle.com> Co-authored-by: Alexandre Iline <alexandre.iline@oracle.com> Co-authored-by: Volker Simonis <volker.simonis@gmail.com> Co-authored-by: Staffan Larsen <staffan.larsen@oracle.com> Co-authored-by: Stuart Marks <stuart.marks@oracle.com> Co-authored-by: Semyon Sadetsky <semyon.sadetsky@oracle.com> Co-authored-by: Serguei Spitsyn <serguei.spitsyn@oracle.com> Co-authored-by: Sundararajan Athijegannathan <sundararajan.athijegannathan@oracle.com> Co-authored-by: Valerie Peng <valerie.peng@oracle.com> Co-authored-by: Vincent Ryan <vincent.x.ryan@oracle.com> Co-authored-by: Weijun Wang <weijun.wang@oracle.com> Co-authored-by: Yuri Nesterenko <yuri.nesterenko@oracle.com> Co-authored-by: Yekaterina Kantserova <yekaterina.kantserova@oracle.com> Co-authored-by: Alexander Kulyakthin <alexander.kulyakhtin@oracle.com> Co-authored-by: Felix Yang <felix.yang@oracle.com> Co-authored-by: Andrei Eremeev <andrei.eremeev@oracle.com> Co-authored-by: Frank Yuan <frank.yuan@oracle.com> Co-authored-by: Sergei Pikalev <sergei.pikalev@oracle.com> Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com> Co-authored-by: Tiantian Du <tiantian.du@oracle.com> Co-authored-by: Sha Jiang <sha.jiang@oracle.com> Reviewed-by: alanb, mchung, naoto, rriggs, psandoz, plevart, mullan, ascarpino, vinnie, prr, sherman, dfuchs, mhaupt
68 lines
3.2 KiB
Plaintext
68 lines
3.2 KiB
Plaintext
grant {
|
|
// java.base module
|
|
permission java.io.SerializablePermission "enableSubstitution";
|
|
permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
|
|
permission java.nio.file.LinkPermission "hard";
|
|
permission javax.net.ssl.SSLPermission "getSSLSessionContext";
|
|
permission javax.security.auth.AuthPermission "doAsPrivileged";
|
|
permission javax.security.auth.PrivateCredentialPermission "* * \"*\"",
|
|
"read";
|
|
// java.base module (@jdk.Exported Permissions)
|
|
permission jdk.net.NetworkPermission "setOption.SO_FLOW_SLA";
|
|
// java.desktop module
|
|
permission java.awt.AWTPermission "createRobot";
|
|
permission javax.sound.sampled.AudioPermission "play";
|
|
// java.logging module
|
|
permission java.util.logging.LoggingPermission "control", "";
|
|
// java.management module
|
|
permission java.lang.management.ManagementPermission "control";
|
|
permission javax.management.MBeanPermission "*", "getAttribute";
|
|
permission javax.management.MBeanServerPermission "createMBeanServer";
|
|
permission javax.management.MBeanTrustPermission "register";
|
|
permission javax.management.remote.SubjectDelegationPermission "*";
|
|
// java.security.jgss module
|
|
permission javax.security.auth.kerberos.DelegationPermission "\"*\" \"*\"";
|
|
permission javax.security.auth.kerberos.ServicePermission "*", "accept";
|
|
// java.sql module
|
|
permission java.sql.SQLPermission "setLog";
|
|
// javax.xml.bind module
|
|
permission javax.xml.bind.JAXBPermission "setDatatypeConverter";
|
|
// javax.xml.ws module
|
|
permission javax.xml.ws.WebServicePermission "publishEndpoint";
|
|
// java.smartcardio module
|
|
permission javax.smartcardio.CardPermission "*", "*";
|
|
// jdk.attach module (@jdk.Exported Permissions)
|
|
permission com.sun.tools.attach.AttachPermission "attachVirtualMachine";
|
|
// jdk.jdi module (@jdk.Exported Permissions)
|
|
permission com.sun.jdi.JDIPermission "virtualMachineManager";
|
|
// jdk.security.jgss module (@jdk.Exported Permissions)
|
|
permission com.sun.security.jgss.InquireSecContextPermission "*";
|
|
};
|
|
|
|
grant
|
|
// java.base module
|
|
principal javax.security.auth.x500.X500Principal "CN=Duke",
|
|
// java.management module
|
|
principal javax.management.remote.JMXPrincipal "Duke",
|
|
// java.security.jgss module
|
|
principal javax.security.auth.kerberos.KerberosPrincipal "duke@openjdk.org",
|
|
// jdk.security.auth module (@jdk.Exported Principals)
|
|
principal com.sun.security.auth.UserPrincipal "Duke",
|
|
principal com.sun.security.auth.NTDomainPrincipal "openjdk.org",
|
|
principal com.sun.security.auth.NTSid
|
|
"S-1-5-21-3623811015-3361044348-30300820-1013",
|
|
principal com.sun.security.auth.NTUserPrincipal "Duke",
|
|
principal com.sun.security.auth.UnixNumericUserPrincipal "0",
|
|
principal com.sun.security.auth.UnixPrincipal "duke" {
|
|
permission java.util.PropertyPermission "user.home", "read";
|
|
};
|
|
|
|
grant
|
|
// java.security.jgss module
|
|
principal javax.security.auth.kerberos.KerberosPrincipal "duke@openjdk.org"
|
|
{
|
|
// test that ${{self}} expansion works
|
|
permission javax.security.auth.kerberos.ServicePermission "${{self}}",
|
|
"accept";
|
|
};
|