[jboss-remoting-commits] JBoss Remoting SVN: r3719 - remoting2/branches/2.x.

[jboss-remoting-commits at lists.jboss.org]

Author: david.lloyd at jboss.com
Date: 2008-03-21 01:19:35 -0400 (Fri, 21 Mar 2008)
New Revision: 3719

Modified:
   remoting2/branches/2.x/build.xml
   remoting2/branches/2.x/test.policy
Log:
Break out permissions for the test suite itself

Modified: remoting2/branches/2.x/build.xml
===================================================================
--- remoting2/branches/2.x/build.xml	2008-03-21 05:09:27 UTC (rev 3718)
+++ remoting2/branches/2.x/build.xml	2008-03-21 05:19:35 UTC (rev 3719)
@@ -31,8 +31,8 @@
 
    <!-- set the security manager information for unit tests -->
    <property name="java.security.policy" value="${basedir}/test.policy"/>
-   <!--<property name="java.security.manager" value=""/>-->
-   <property name="java.security.manager" value="org.jboss.test.security.LoggingSecurityManager"/>
+   <property name="java.security.manager" value=""/>
+   <!--<property name="java.security.manager" value="org.jboss.test.security.LoggingSecurityManager"/>-->
    <!--<property name="java.security.debug" value="access,failure"/>-->
    <property name="java.security.debug" value=""/>
 

Modified: remoting2/branches/2.x/test.policy
===================================================================
--- remoting2/branches/2.x/test.policy	2008-03-21 05:09:27 UTC (rev 3718)
+++ remoting2/branches/2.x/test.policy	2008-03-21 05:19:35 UTC (rev 3719)
@@ -97,6 +97,7 @@
     permission java.util.PropertyPermission "org.apache.commons.logging.LogFactory", "read";
     permission java.util.PropertyPermission "org.apache.commons.logging.Log", "read";
     permission java.lang.RuntimePermission "accessClassInPackage.sun.util.logging.resources";
+    permission java.io.FilePermission "${build.home}/output/classes/-", "read";
 };
 
 grant codeBase "file:${build.home}/lib/-" {
@@ -108,7 +109,30 @@
 };
 
 grant codeBase "file:${build.home}/output/tests/classes/-" {
-    permission java.security.AllPermission;
+    // Used by the test suite itself
+    permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
+    permission javax.management.MBeanServerPermission "createMBeanServer";
+    permission javax.management.MBeanPermission "org.jboss.remoting.transport.connector#-[jboss.remoting:id=1,transport=socket,type=Connector]", "registerMBean, unregisterMBean, queryMBeans, isInstanceOf";
+    permission java.lang.RuntimePermission "enableContextClassLoaderOverride";
+    permission java.lang.RuntimePermission "createClassLoader";
+
+    // This is technically the JNP server, but it seems intentional - note that this might mask other problems though
+    permission java.net.SocketPermission "*:*", "accept, connect, resolve";
+
+    // TODO - this stuff ought to be in privileged blocks within the Ant JUnit task
+    permission java.util.PropertyPermission "*", "read, write"; // ugh
+
+    // TODO - JBoss Serialization SHOULD be doing these operations in a privileged block - JBSER-105
+    permission java.lang.RuntimePermission "accessDeclaredMembers";
+    permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
+    permission java.lang.RuntimePermission "accessClassInPackage.sun.reflect";
+    permission java.lang.RuntimePermission "reflectionFactoryAccess";
+    permission java.io.SerializablePermission "enableSubclassImplementation";
+    permission java.lang.RuntimePermission "accessClassInPackage.sun.misc";
+    permission java.io.SerializablePermission "enableSubstitution"; // <- this one is a "maybe" :-)
+
+    // TESTING ONLY - Use with the LoggingSecurityManager to locate needed permissions for the above block
+//    permission java.security.AllPermission;
 };
 
 grant codeBase "file:${ant.library.dir}/-" {