| Carmelo Cascone | 395b231 | 2019-06-18 17:34:16 -0700 | [diff] [blame] | 1 | // |
| 2 | // This system policy file grants a set of default permissions to all domains |
| 3 | // and can be configured to grant additional permissions to modules and other |
| 4 | // code sources. The code source URL scheme for modules linked into a |
| 5 | // run-time image is "jrt". |
| 6 | // |
| 7 | // For example, to grant permission to read the "foo" property to the module |
| 8 | // "com.greetings", the grant entry is: |
| 9 | // |
| 10 | // grant codeBase "jrt:/com.greetings" { |
| 11 | // permission java.util.PropertyPermission "foo", "read"; |
| 12 | // }; |
| 13 | // |
| 14 | |
| 15 | // default permissions granted to all domains |
| 16 | grant { |
| 17 | // allows anyone to listen on dynamic ports |
| 18 | permission java.net.SocketPermission "localhost:0", "listen"; |
| 19 | |
| 20 | // "standard" properies that can be read by anyone |
| 21 | permission java.util.PropertyPermission "java.version", "read"; |
| 22 | permission java.util.PropertyPermission "java.vendor", "read"; |
| 23 | permission java.util.PropertyPermission "java.vendor.url", "read"; |
| 24 | permission java.util.PropertyPermission "java.class.version", "read"; |
| 25 | permission java.util.PropertyPermission "os.name", "read"; |
| 26 | permission java.util.PropertyPermission "os.version", "read"; |
| 27 | permission java.util.PropertyPermission "os.arch", "read"; |
| 28 | permission java.util.PropertyPermission "file.separator", "read"; |
| 29 | permission java.util.PropertyPermission "path.separator", "read"; |
| 30 | permission java.util.PropertyPermission "line.separator", "read"; |
| 31 | permission java.util.PropertyPermission |
| 32 | "java.specification.version", "read"; |
| 33 | permission java.util.PropertyPermission "java.specification.vendor", "read"; |
| 34 | permission java.util.PropertyPermission "java.specification.name", "read"; |
| 35 | permission java.util.PropertyPermission |
| 36 | "java.vm.specification.version", "read"; |
| 37 | permission java.util.PropertyPermission |
| 38 | "java.vm.specification.vendor", "read"; |
| 39 | permission java.util.PropertyPermission |
| 40 | "java.vm.specification.name", "read"; |
| 41 | permission java.util.PropertyPermission "java.vm.version", "read"; |
| 42 | permission java.util.PropertyPermission "java.vm.vendor", "read"; |
| 43 | permission java.util.PropertyPermission "java.vm.name", "read"; |
| 44 | }; |