Valerie Peng efa54ce543 8043406: Change default policy for JCE providers to run with as few privileges as possible
Provide default permissions for crypto providers

Reviewed-by: mullan, vinnie
2014-07-10 22:44:58 +00:00

24 lines
931 B
Plaintext

/*
* security policy used by the test process
*/
grant {
// need to move some classes out of the test's classpath; specific to this test
permission java.io.FilePermission "${test.classes}", "read,write,delete";
permission java.io.FilePermission "${test.classes}${/}-", "read,write,delete";
permission java.io.FilePermission ".", "read,write,delete";
permission java.io.FilePermission ".${/}-", "read,write,delete";
// used by TestLibrary to determine test environment
permission java.util.PropertyPermission "test.*", "read";
permission java.util.PropertyPermission "user.dir", "read";
permission java.util.PropertyPermission "java.home", "read";
// test needs to use java to exec an rmiregistry
permission java.io.FilePermission "${java.home}${/}bin${/}-", "execute";
// test needs to communicate with this its registry
permission java.net.SocketPermission "*:1024-", "connect,accept,listen";
};