[jboss-cvs] JBossAS SVN: r81087 - trunk/testsuite/src/resources/securitymgr.

[jboss-cvs-commits at lists.jboss.org]

Author: anil.saldhana at jboss.com
Date: 2008-11-14 14:50:04 -0500 (Fri, 14 Nov 2008)
New Revision: 81087

Modified:
   trunk/testsuite/src/resources/securitymgr/server.policy
Log:
JBAS-4154: remove perms from default block

Modified: trunk/testsuite/src/resources/securitymgr/server.policy
===================================================================
--- trunk/testsuite/src/resources/securitymgr/server.policy	2008-11-14 19:25:45 UTC (rev 81086)
+++ trunk/testsuite/src/resources/securitymgr/server.policy	2008-11-14 19:50:04 UTC (rev 81087)
@@ -67,11 +67,13 @@
 
 grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/http-invoker.sar/invoker.war/-" {
    permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute";
+   permission java.lang.RuntimePermission "getClassLoader";
 };
 
 grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jmx-remoting.sar/-" {
    permission javax.management.MBeanTrustPermission "register";
    permission java.net.SocketPermission "*", "accept,listen,resolve";
+   permission java.lang.RuntimePermission "getClassLoader";
 };
 
 
@@ -99,12 +101,16 @@
    permission java.security.AllPermission;
 };
 
+grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jboss-local-jdbc.rar/-" {
+   permission java.lang.RuntimePermission "getClassLoader";
+};
 
 grant codeBase "vfszip:${jboss.server.home.dir}/deploy/management/console-mgr.sar/-" {
    permission javax.management.MBeanTrustPermission "register";
    permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute";
    permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","*";
    permission java.io.FilePermission "<<ALL FILES>>", "read";
+   permission java.lang.RuntimePermission "getClassLoader";
 };
 
 
@@ -112,16 +118,19 @@
    permission javax.management.MBeanTrustPermission "register";
    permission javax.management.MBeanPermission "*", "getAttribute";
    permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind";
+   permission java.lang.RuntimePermission "getClassLoader";
 };
 
 grant codeBase "vfsfile:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" {
    permission javax.management.MBeanTrustPermission "register";
    permission javax.management.MBeanPermission "*", "getAttribute";
    permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind";
+   permission java.lang.RuntimePermission "getClassLoader";
 };
 
 grant codeBase "vfszip:${jboss.server.home.dir}/deploy/jms-ra.rar/jms-ra.jar" {
    permission java.lang.RuntimePermission "setContextClassLoader";
+   permission java.lang.RuntimePermission "getClassLoader";
    permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup";
    permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read";
    permission javax.management.MBeanPermission "*", "getAttribute,invoke,setAttribute";
@@ -154,7 +163,7 @@
 
 //This block needs to go when https://jira.jboss.org/jira/browse/JBMESSAGING-1446 is handled
 grant codeBase "vfszip:${jboss.test.deploy.dir}/cts.jar" {
-   permission java.lang.RuntimePermission "setContextClassLoader";
+   permission java.lang.RuntimePermission "getClassLoader,setContextClassLoader";
    permission java.io.FilePermission "${jboss.home.dir}/lib/jboss-aop.jar", "read";
 };
  
@@ -171,8 +180,6 @@
    permission java.net.SocketPermission "*", "connect";
    permission java.security.SecurityPermission "getPolicy";
    permission java.lang.RuntimePermission "accessClassInPackage.*";
-   permission java.lang.RuntimePermission "getClassLoader";
-   permission java.lang.RuntimePermission "getProtectionDomain";
    permission java.lang.RuntimePermission "org.jboss.security.SecurityAssociation.getSubject";
    permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContext.getSubjectInfo";