[jboss-cvs] JBossAS SVN: r89490 - in branches/Branch_5_x/testsuite: src/resources/security-tst and 1 other directory.

[jboss-cvs-commits at lists.jboss.org]

Author: pskopek at redhat.com
Date: 2009-05-28 07:21:55 -0400 (Thu, 28 May 2009)
New Revision: 89490

Modified:
   branches/Branch_5_x/testsuite/imports/server-config.xml
   branches/Branch_5_x/testsuite/src/resources/security-tst/server.policy
Log:
Improvements to security policy and configuration for running most of unit tests under Java security manager.

Modified: branches/Branch_5_x/testsuite/imports/server-config.xml
===================================================================
--- branches/Branch_5_x/testsuite/imports/server-config.xml	2009-05-28 06:24:18 UTC (rev 89489)
+++ branches/Branch_5_x/testsuite/imports/server-config.xml	2009-05-28 11:21:55 UTC (rev 89490)
@@ -134,8 +134,8 @@
            <jvmarg value="-Djboss.test.deploy.dir=${jboss.test.deploy.dir}" />
            <jvmarg value="-Djava.security.manager"/>
            <jvmarg value="-Djava.security.policy==${build.resources}/security-tst/server.policy"/>
-    	 <sysproperty key="java.protocol.handler.pkgs" value="org.jboss.handlers.stub"/>
-           <jvmarg value="-Djava.security.debug=failure,debug"/>
+           <jvmarg value="-Djava.security.debug=access,failure"/>
+           <sysproperty key="java.protocol.handler.pkgs" value="org.jboss.handlers.stub"/>
     
            <!-- Replace for security manager debug verbose info
            <jvmarg value="-Djava.security.debug=access,failure,policy"/>

Modified: branches/Branch_5_x/testsuite/src/resources/security-tst/server.policy
===================================================================
--- branches/Branch_5_x/testsuite/src/resources/security-tst/server.policy	2009-05-28 06:24:18 UTC (rev 89489)
+++ branches/Branch_5_x/testsuite/src/resources/security-tst/server.policy	2009-05-28 11:21:55 UTC (rev 89490)
@@ -46,6 +46,10 @@
    permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jboss.server.home.dir}/conf/-" {
+   permission java.security.AllPermission;
+};
+
 grant codeBase "file:${jboss.server.home.dir}/deployers/-" {
    permission java.security.AllPermission;
 };
@@ -70,19 +74,23 @@
    permission java.security.AllPermission;
 };
 
-grant codeBase "file:${jboss.server.home.dir}/lib/-" {
+grant codeBase "vfszip:${jboss.server.home.dir}/lib/-" {
    permission java.security.AllPermission;
 };
 
-grant codeBase "file:${jboss.server.home.dir}/deployers/-" {
+grant codeBase "vfszip:${jboss.server.home.dir}/conf/-" {
    permission java.security.AllPermission;
 };
 
-grant codeBase "file:${jboss.server.home.dir}/work/-" {
+grant codeBase "vfszip:${jboss.server.home.dir}/deployers/-" {
    permission java.security.AllPermission;
 };
 
+grant codeBase "vfszip:${jboss.server.home.dir}/work/-" {
+   permission java.security.AllPermission;
+};
 
+
 //*******************************************************
 // Trusted Specific JBoss Code (REAL URL Version)
 //*******************************************************
@@ -157,6 +165,9 @@
  permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jboss.server.home.dir}/deploy/snmp-adaptor.sar/-" {
+ permission java.security.AllPermission;
+};
 
 
 //*******************************************************