[jboss-remoting-commits] JBoss Remoting SVN: r3587 - remoting2/branches/2.x.

[jboss-remoting-commits at lists.jboss.org]

Author: david.lloyd at jboss.com
Date: 2008-03-07 11:54:48 -0500 (Fri, 07 Mar 2008)
New Revision: 3587

Added:
   remoting2/branches/2.x/test.policy
Log:
Add basic test security policy

Added: remoting2/branches/2.x/test.policy
===================================================================
--- remoting2/branches/2.x/test.policy	                        (rev 0)
+++ remoting2/branches/2.x/test.policy	2008-03-07 16:54:48 UTC (rev 3587)
@@ -0,0 +1,41 @@
+
+// Permissions to run Remoting itself
+grant {
+    // Used by remote class loading system
+    permission java.lang.RuntimePermission "createClassLoader";
+
+    // Can't create sockets without it
+    permission java.net.SocketPermission "*:*", "accept,connect,listen,resolve";
+};
+
+// Permissions for JBoss Serialization
+grant {
+    permission java.lang.RuntimePermission "accessDeclaredMembers";
+    permission java.io.SerializablePermission "enableSubstitution";
+    permission java.lang.RuntimePermission "accessClassInPackage.sun.reflect";
+    permission java.lang.RuntimePermission "reflectionFactoryAccess";
+};
+
+// Permissions for JGroups
+grant {
+    permission java.io.FilePermission "jg-magic-map.xml", "read, write, delete";
+};
+
+// Permissions to run the test suite
+grant {
+    // Used by at least one test case
+    permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
+};
+
+// Permissions for JUnit itself to function
+grant {
+    permission java.io.FilePermission "output/tests/-", "read, write, delete";
+    permission java.io.FilePermission "<<ALL FILES>>", "execute";
+    permission java.util.PropertyPermission "*", "read, write"; // todo - narrow this down a tad?
+    permission java.lang.RuntimePermission "setIO";
+};
+
+// Uncomment for testing only
+grant {
+//    permission java.security.AllPermission;
+};
\ No newline at end of file