JBoss Community

JBoss AS7: Security : Running under a Java Security Manager

new comment by Sven-Jørgen Karlsen View all comments on this document

Hi, thanks for the article. I tried this to get 7.1.1.Final to boot up with a policy file, using a rule like the following:

...

grant codeBase "file:${jboss.home.dir}/jboss-modules.jar" {

   permission java.security.AllPermission;

};

...

 

Moving on to the interesting part, applying rules to my deployment, I couldn't formulate an URI to adress the correct deployment unit in the codeBase attribute. E.g:

rules like:

grant codeBase "file:${jboss.home.dir}/standalone/deployments/policy-rebel-0.0.1-SNAPSHOT.war" {

   permission java.util.PropertyPermission "*", "read,write";

};

didn't apply. But a general rule without codeBase, works. I suspect this might have something to do with VFS. So the question is: how do you address a deployment unit in codeBases of policy grants?

 

 

Sven-Jørgen