[jboss-remoting-commits] JBoss Remoting SVN: r3690 - remoting2/branches/2.x.

[jboss-remoting-commits at lists.jboss.org]

Author: david.lloyd at jboss.com
Date: 2008-03-20 20:31:13 -0400 (Thu, 20 Mar 2008)
New Revision: 3690

Modified:
   remoting2/branches/2.x/test.policy
Log:
A load of permissions for log4j, and one for ipv6

Modified: remoting2/branches/2.x/test.policy
===================================================================
--- remoting2/branches/2.x/test.policy	2008-03-20 23:37:14 UTC (rev 3689)
+++ remoting2/branches/2.x/test.policy	2008-03-21 00:31:13 UTC (rev 3690)
@@ -18,6 +18,7 @@
     permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#MBeanServerId[JMImplementation:type=MBeanServerDelegate]", "getAttribute";
     permission javax.management.MBeanPermission "-#-[-]", "queryMBeans";
     permission javax.management.MBeanPermission "org.jboss.remoting.transport.socket.SocketServerInvoker#-[jboss.remoting:host=127.0.0.1,*,service=invoker,transport=socket]", "registerMBean, queryMBeans, isInstanceOf";
+    permission javax.management.MBeanPermission "org.jboss.remoting.transport.socket.SocketServerInvoker#-[jboss.remoting:host=\"[::1]\",*,service=invoker,transport=socket]", "registerMBean, queryMBeans, isInstanceOf";
     permission javax.management.MBeanPermission "org.jboss.remoting.transport.Connector#-[jboss.remoting:transport=socket,type=Connector]", "queryMBeans, isInstanceOf";
     permission javax.management.MBeanPermission "org.jboss.remoting.transport.Connector#-[jboss.remoting:transport=sslsocket,type=Connector]", "queryMBeans, isInstanceOf";
     permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "queryMBeans, isInstanceOf";
@@ -57,6 +58,23 @@
     permission java.lang.RuntimePermission "reflectionFactoryAccess";
     permission java.io.SerializablePermission "enableSubclassImplementation";
     permission java.io.SerializablePermission "enableSubstitution"; // <- this one is a "maybe" :-)
+
+    // TODO - We should use a version of JBoss logging + log4j that does this stuff in privileged blocks
+    permission java.util.PropertyPermission "org.jboss.logging.Logger.pluginClass", "read";
+    permission java.io.FilePermission "${build.home}/src/etc/log4j.properties", "read";
+    permission java.util.PropertyPermission "log4j.defaultInitOverride", "read";
+    permission java.io.FilePermission "${build.home}/src/etc/log4j.xml", "read";
+    permission java.lang.RuntimePermission "accessClassInPackage.sun.net.www.protocol.dummy";
+    permission java.io.FilePermission "${build.home}/lib/apache-log4j/lib/log4j.jar", "read";
+    permission java.util.PropertyPermission "elementAttributeLimit", "read";
+    permission java.util.PropertyPermission "maxOccurLimit", "read";
+    permission java.util.PropertyPermission "entityExpansionLimit", "read";
+    permission java.util.PropertyPermission "javax.xml.parsers.DocumentBuilderFactory", "read";
+    permission java.util.PropertyPermission "log4j.ignoreTCL", "read";
+    permission java.util.PropertyPermission "log4j.configuratorClass", "read";
+    permission java.util.PropertyPermission "log4j.configDebug", "read";
+    permission java.util.PropertyPermission "log4j.debug", "read";
+    permission java.util.PropertyPermission "log4j.configuration", "read";
 };
 
 grant codeBase "file:${build.home}/lib/-" {