Sven-Jørgen Karlsen [
https://community.jboss.org/people/svejk.rpl] commented on the
document
"JBoss AS7: Security : Running under a Java Security Manager"
To view all comments on this document, visit:
https://community.jboss.org/docs/DOC-17431#comment-9606
--------------------------------------------------
Hi, thanks for the article. I tried this to get 7.1.1.Final to boot up with a policy file,
using a rule like the following:
...
grant codeBase "file:${jboss.home.dir}/jboss-modules.jar" {
permission java.security.AllPermission;
};
...
Moving on to the interesting part, applying rules to my deployment, I couldn't
formulate an URI to adress the correct deployment unit in the codeBase attribute. E.g:
rules like:
grant codeBase
"file:${jboss.home.dir}/standalone/deployments/policy-rebel-0.0.1-SNAPSHOT.war"
{
permission java.util.PropertyPermission "*", "read,write";
};
didn't apply. But a general rule without codeBase, works. I suspect this might have
something to do with VFS. So the question is: how do you address a deployment unit in
codeBases of policy grants?
Sven-Jørgen
--------------------------------------------------