--- old/src/share/lib/security/java.policy	2014-04-22 11:56:42.917629662 -0700
+++ new/src/share/lib/security/java.policy	2014-04-22 11:56:42.753629659 -0700
@@ -1,7 +1,60 @@
+// permissions required by each component
+grant codeBase "file:${java.home}/lib/ext/zipfs.jar" {
+        permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
+        permission java.lang.RuntimePermission "fileSystemProvider";
+        permission java.util.PropertyPermission "*", "read";
+};
+
+grant codeBase "file:${java.home}/lib/ext/cldrdata.jar" {
+        permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*";
+        permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*";
+        permission java.util.PropertyPermission "*", "read";
+};
+
+grant codeBase "file:${java.home}/lib/ext/localedata.jar" {
+        permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*";
+        permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*";
+        permission java.util.PropertyPermission "*", "read";
+};
+
+grant codeBase "file:${java.home}/lib/ext/dnsns.jar" {
+        permission java.security.AllPermission;
+};
+
+grant codeBase "file:${java.home}/lib/ext/nashorn.jar" {
+        permission java.security.AllPermission;
+};
+
+grant codeBase "file:${java.home}/lib/ext/jfxrt.jar" {
+        permission java.security.AllPermission;
+};
+
+grant codeBase "file:${java.home}/lib/ext/sunec.jar" {
+        permission java.security.AllPermission;
+};
+
+grant codeBase "file:${java.home}/lib/ext/sunjce_provider.jar" {
+        permission java.security.AllPermission;
+};
 
-// Standard extensions get all permissions by default
+grant codeBase "file:${java.home}/lib/ext/sunpkcs11.jar" {
+        permission java.security.AllPermission;
+};
 
-grant codeBase "file:${{java.ext.dirs}}/*" {
+// solaris-only
+grant codeBase "file:${java.home}/lib/ext/ucrypto.jar" {
+        permission java.security.AllPermission;
+};
+
+// windows-only
+grant codeBase "file:${java.home}/lib/ext/sunmscapi.jar" {
+        permission java.security.AllPermission;
+};
+
+grant codeBase "file:${java.home}/lib/ext/jaccess.jar" {
+        permission java.security.AllPermission;
+};
+grant codeBase "file:${java.home}/lib/ext/access-bridge-64.jar" {
         permission java.security.AllPermission;
 };