1 // permissions required by each component 2 grant codeBase "file:${java.home}/lib/ext/zipfs.jar" { 3 permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete"; 4 permission java.lang.RuntimePermission "fileSystemProvider"; 5 permission java.util.PropertyPermission "*", "read"; 6 }; 7 8 grant codeBase "file:${java.home}/lib/ext/cldrdata.jar" { 9 permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*"; 10 permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*"; 11 permission java.util.PropertyPermission "*", "read"; 12 }; 13 14 grant codeBase "file:${java.home}/lib/ext/localedata.jar" { 15 permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*"; 16 permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*"; 17 permission java.util.PropertyPermission "*", "read"; 18 }; 19 20 grant codeBase "file:${java.home}/lib/ext/dnsns.jar" { 21 permission java.security.AllPermission; 22 }; 23 24 grant codeBase "file:${java.home}/lib/ext/nashorn.jar" { 25 permission java.security.AllPermission; 26 }; 27 28 grant codeBase "file:${java.home}/lib/ext/sunec.jar" { 29 permission java.security.AllPermission; 30 }; 31 32 grant codeBase "file:${java.home}/lib/ext/sunjce_provider.jar" { 33 permission java.security.AllPermission; 34 }; 35 36 grant codeBase "file:${java.home}/lib/ext/sunpkcs11.jar" { 37 permission java.security.AllPermission; 38 }; 39 40 // default permissions granted to all domains 41 42 grant { 43 // Allows any thread to stop itself using the java.lang.Thread.stop() 44 // method that takes no argument. 45 // Note that this permission is granted by default only to remain 46 // backwards compatible. 47 // It is strongly recommended that you either remove this permission 48 // from this policy file or further restrict it to code sources 49 // that you specify, because Thread.stop() is potentially unsafe. 50 // See the API specification of java.lang.Thread.stop() for more 51 // information. 52 permission java.lang.RuntimePermission "stopThread"; 53 54 // allows anyone to listen on dynamic ports 55 permission java.net.SocketPermission "localhost:0", "listen"; 56 57 // "standard" properies that can be read by anyone 58 59 permission java.util.PropertyPermission "java.version", "read"; 60 permission java.util.PropertyPermission "java.vendor", "read"; 61 permission java.util.PropertyPermission "java.vendor.url", "read"; 62 permission java.util.PropertyPermission "java.class.version", "read"; 63 permission java.util.PropertyPermission "os.name", "read"; 64 permission java.util.PropertyPermission "os.version", "read"; 65 permission java.util.PropertyPermission "os.arch", "read"; 66 permission java.util.PropertyPermission "file.separator", "read"; 67 permission java.util.PropertyPermission "path.separator", "read"; 68 permission java.util.PropertyPermission "line.separator", "read"; 69 70 permission java.util.PropertyPermission "java.specification.version", "read"; 71 permission java.util.PropertyPermission "java.specification.vendor", "read"; 72 permission java.util.PropertyPermission "java.specification.name", "read"; 73 74 permission java.util.PropertyPermission "java.vm.specification.version", "read"; 75 permission java.util.PropertyPermission "java.vm.specification.vendor", "read"; 76 permission java.util.PropertyPermission "java.vm.specification.name", "read"; 77 permission java.util.PropertyPermission "java.vm.version", "read"; 78 permission java.util.PropertyPermission "java.vm.vendor", "read"; 79 permission java.util.PropertyPermission "java.vm.name", "read"; 80 }; 81