| // |
| // This system policy file grants a set of default permissions to all domains |
| // and can be configured to grant additional permissions to modules and other |
| // code sources. The code source URL scheme for modules linked into a |
| // run-time image is "jrt". |
| // |
| // For example, to grant permission to read the "foo" property to the module |
| // "com.greetings", the grant entry is: |
| // |
| // grant codeBase "jrt:/com.greetings" { |
| // permission java.util.PropertyPermission "foo", "read"; |
| // }; |
| // |
| |
| // default permissions granted to all domains |
| grant { |
| // allows anyone to listen on dynamic ports |
| permission java.net.SocketPermission "localhost:0", "listen"; |
| |
| // "standard" properies that can be read by anyone |
| permission java.util.PropertyPermission "java.version", "read"; |
| permission java.util.PropertyPermission "java.vendor", "read"; |
| permission java.util.PropertyPermission "java.vendor.url", "read"; |
| permission java.util.PropertyPermission "java.class.version", "read"; |
| permission java.util.PropertyPermission "os.name", "read"; |
| permission java.util.PropertyPermission "os.version", "read"; |
| permission java.util.PropertyPermission "os.arch", "read"; |
| permission java.util.PropertyPermission "file.separator", "read"; |
| permission java.util.PropertyPermission "path.separator", "read"; |
| permission java.util.PropertyPermission "line.separator", "read"; |
| permission java.util.PropertyPermission |
| "java.specification.version", "read"; |
| permission java.util.PropertyPermission "java.specification.vendor", "read"; |
| permission java.util.PropertyPermission "java.specification.name", "read"; |
| permission java.util.PropertyPermission |
| "java.vm.specification.version", "read"; |
| permission java.util.PropertyPermission |
| "java.vm.specification.vendor", "read"; |
| permission java.util.PropertyPermission |
| "java.vm.specification.name", "read"; |
| permission java.util.PropertyPermission "java.vm.version", "read"; |
| permission java.util.PropertyPermission "java.vm.vendor", "read"; |
| permission java.util.PropertyPermission "java.vm.name", "read"; |
| }; |