java.policy permission question

[Marcin Kasprzak]

Hello,

I wonder if anybody can explain me how to restrict access
to filesystem for particular java aplication, this application
still should have an access to JRE properties.

I created following policy file "my.policy':
grant {
permission java.security.AllPermission;
};

and I tried to start my application like this:

java -Djava.security.manager -Djava.security.policy==my.policy myApp

but it did work myApp still could perform any filesystem I/O operation.

Is it possible somehow to revoke rights to filesystem? Something like:
grant {
permission java.io.FilePermission "<<ALL FILES>>", "NONE";
};

if "NONE" was defined....

Your input is highly welcomed.

Regards,

 

[Arne Vajhøj]

I wonder if anybody can explain me how to restrict access
to filesystem for particular java aplication, this application
still should have an access to JRE properties.

I created following policy file "my.policy':
grant {
permission java.security.AllPermission;
};

and I tried to start my application like this:

java -Djava.security.manager -Djava.security.policy==my.policy myApp

but it did work myApp still could perform any filesystem I/O operation.

Why should granting all permissions prevent file IO ?

Arne

 

[Marcin Kasprzak]

Why should granting all permissions prevent file IO ?

Hello,
You right, thanks man!

Regards,