[jboss-cvs] JBossAS SVN: r76068 - branches/JBPAPP_4_3_0_GA_CC/system/src/bin.

[jboss-cvs-commits at lists.jboss.org]

Author: anil.saldhana at jboss.com
Date: 2008-07-21 15:12:51 -0400 (Mon, 21 Jul 2008)
New Revision: 76068

Modified:
   branches/JBPAPP_4_3_0_GA_CC/system/src/bin/security_cc.policy
Log:
JBOSSCC-7: sec mgr policy

Modified: branches/JBPAPP_4_3_0_GA_CC/system/src/bin/security_cc.policy
===================================================================
--- branches/JBPAPP_4_3_0_GA_CC/system/src/bin/security_cc.policy	2008-07-21 19:05:20 UTC (rev 76067)
+++ branches/JBPAPP_4_3_0_GA_CC/system/src/bin/security_cc.policy	2008-07-21 19:12:51 UTC (rev 76068)
@@ -1,6 +1,14 @@
+//**********************************************************************
+// Common Criteria Evaluated Configuration Java2 Security Manager Policy
 // Author: Anil Saldhana 
-//The Java2 security policy for the Common Criteria Evaluation
+//**********************************************************************
 
+//**********************************************************
+//
+//   Section 1:  Java JDK Core Code
+//   (Permissions are given fully)
+//
+//*********************************************************
 // Trusted core Java code
 grant codeBase "file:${java.home}/lib/ext/-" {
    permission java.security.AllPermission;
@@ -13,6 +21,16 @@
    permission java.security.AllPermission;
 };
 
+//*******************End JDK Core**************************
+
+
+
+//*********************************************************
+//
+//  Permissions assigned to JBoss Core Codebase
+//
+//*********************************************************
+
 // Trusted core Jboss code
 grant codeBase "file:${jboss.home.dir}/bin/-" {
    permission java.security.AllPermission;
@@ -27,12 +45,25 @@
    permission java.security.AllPermission;
 };
 
+//**************************************************************
+//
+//       JBoss EAP Testsuite Permissions
+//
+//**************************************************************
 // Permissions for the WarPermissionsUnitTestCase
 grant codeBase "file:${jboss.test.deploy.dir}/securitymgr/-" {
    permission java.util.PropertyPermission "*", "read";
    permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
 };
 
+//*******************End JBoss EAP Testsuite Permissions*********
+
+
+//**************************************************************
+//
+//       User Applications Permissions
+//
+//**************************************************************
 // Minimal permissions are allowed to everyone else
 grant {
    permission java.util.PropertyPermission "*", "read";
@@ -52,4 +83,3 @@
    permission javax.security.auth.AuthPermission "createLoginContext.*";
    permission javax.security.auth.AuthPermission "getLoginConfiguration";
 };
-