Sven-Jørgen Karlsen [https://community.jboss.org/people/svejk.rpl] commented on the document "JBoss AS7: Security : Running under a Java Security Manager" To view all comments on this document, visit: https://community.jboss.org/docs/DOC-17431#comment-9606 -------------------------------------------------- Hi, thanks for the article. I tried this to get 7.1.1.Final to boot up with a policy file, using a rule like the following: ... grant codeBase "file:${jboss.home.dir}/jboss-modules.jar" {    permission java.security.AllPermission; }; ... Moving on to the interesting part, applying rules to my deployment, I couldn't formulate an URI to adress the correct deployment unit in the codeBase attribute. E.g: rules like: grant codeBase "file:${jboss.home.dir}/standalone/deployments/policy-rebel-0.0.1-SNAPSHOT.war" {    permission java.util.PropertyPermission "*", "read,write"; }; didn't apply. But a general rule without codeBase, works. I suspect this might have something to do with VFS. So the question is: how do you address a deployment unit in codeBases of policy grants? Sven-Jørgen --------------------------------------------------