[jboss-dev-forums] [PicketBox Development] - JBoss AS7: Security : Running under a Java Security Manager

[Sven-Jørgen Karlsen]

Sven-Jørgen Karlsen [https://community.jboss.org/people/svejk.rpl] commented on the document

"JBoss AS7: Security : Running under a Java Security Manager"

To view all comments on this document, visit: https://community.jboss.org/docs/DOC-17431#comment-9606

--------------------------------------------------
Hi, thanks for the article. I tried this to get 7.1.1.Final to boot up with a policy file, using a rule like the following:
...
grant codeBase "file:${jboss.home.dir}/jboss-modules.jar" {
   permission java.security.AllPermission;
};
...

Moving on to the interesting part, applying rules to my deployment, I couldn't formulate an URI to adress the correct deployment unit in the codeBase attribute. E.g:
rules like:
grant codeBase "file:${jboss.home.dir}/standalone/deployments/policy-rebel-0.0.1-SNAPSHOT.war" {
   permission java.util.PropertyPermission "*", "read,write";
 };
 didn't apply. But a general rule without codeBase, works. I suspect this might have something to do with VFS. So the question is: how do you address a deployment unit in codeBases of policy grants?


Sven-Jørgen
--------------------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-dev-forums/attachments/20120330/3468a3ba/attachment.html