1 // 2 // Permissions required by modules stored in a run-time image and loaded 3 // by the platform class loader. 4 // 5 // NOTE that this file is not intended to be modified. If additional 6 // permissions need to be granted to the modules in this file, it is 7 // recommended that they be configured in a separate policy file or 8 // ${java.home}/conf/security/java.policy. 9 // 10 11 grant codeBase "jrt:/java.activation" { 12 permission java.security.AllPermission; 13 }; 14 15 grant codeBase "jrt:/java.compiler" { 16 permission java.security.AllPermission; 17 }; 18 19 grant codeBase "jrt:/java.corba" { 20 permission java.security.AllPermission; 21 }; 22 23 grant codeBase "jrt:/jdk.incubator.httpclient" { 24 }; 25 26 grant codeBase "jrt:/java.scripting" { 27 permission java.security.AllPermission; 28 }; 29 30 grant codeBase "jrt:/java.security.jgss" { 31 permission java.security.AllPermission; 32 }; 33 34 grant codeBase "jrt:/java.smartcardio" { 35 permission javax.smartcardio.CardPermission "*", "*"; 36 permission java.lang.RuntimePermission "loadLibrary.j2pcsc"; 37 permission java.lang.RuntimePermission 38 "accessClassInPackage.sun.security.jca"; 39 permission java.lang.RuntimePermission 40 "accessClassInPackage.sun.security.util"; 41 permission java.util.PropertyPermission 42 "javax.smartcardio.TerminalFactory.DefaultType", "read"; 43 permission java.util.PropertyPermission "os.name", "read"; 44 permission java.util.PropertyPermission "os.arch", "read"; 45 permission java.util.PropertyPermission "sun.arch.data.model", "read"; 46 permission java.util.PropertyPermission 47 "sun.security.smartcardio.library", "read"; 48 permission java.util.PropertyPermission 49 "sun.security.smartcardio.t0GetResponse", "read"; 50 permission java.util.PropertyPermission 51 "sun.security.smartcardio.t1GetResponse", "read"; 52 permission java.util.PropertyPermission 53 "sun.security.smartcardio.t1StripLe", "read"; 54 // needed for looking up native PC/SC library 55 permission java.io.FilePermission "<<ALL FILES>>","read"; 56 permission java.security.SecurityPermission "putProviderProperty.SunPCSC"; 57 permission java.security.SecurityPermission 58 "clearProviderProperties.SunPCSC"; 59 permission java.security.SecurityPermission 60 "removeProviderProperty.SunPCSC"; 61 }; 62 63 grant codeBase "jrt:/java.sql" { 64 permission java.security.AllPermission; 65 }; 66 67 grant codeBase "jrt:/java.sql.rowset" { 68 permission java.security.AllPermission; 69 }; 70 71 grant codeBase "jrt:/java.xml.bind" { 72 permission java.lang.RuntimePermission 73 "accessClassInPackage.sun.misc"; 74 permission java.lang.RuntimePermission 75 "accessClassInPackage.com.sun.xml.internal.*"; 76 permission java.lang.RuntimePermission 77 "accessClassInPackage.com.sun.istack.internal"; 78 permission java.lang.RuntimePermission 79 "accessClassInPackage.com.sun.istack.internal.*"; 80 permission java.lang.RuntimePermission "accessDeclaredMembers"; 81 permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; 82 permission java.util.PropertyPermission "*", "read"; 83 }; 84 85 grant codeBase "jrt:/java.xml.crypto" { 86 permission java.lang.RuntimePermission 87 "accessClassInPackage.sun.security.util"; 88 permission java.util.PropertyPermission "*", "read"; 89 permission java.security.SecurityPermission "putProviderProperty.XMLDSig"; 90 permission java.security.SecurityPermission 91 "clearProviderProperties.XMLDSig"; 92 permission java.security.SecurityPermission 93 "removeProviderProperty.XMLDSig"; 94 permission java.security.SecurityPermission 95 "com.sun.org.apache.xml.internal.security.register"; 96 permission java.security.SecurityPermission 97 "getProperty.jdk.xml.dsig.secureValidationPolicy"; 98 permission java.lang.RuntimePermission 99 "accessClassInPackage.com.sun.org.apache.xml.internal.*"; 100 permission java.lang.RuntimePermission 101 "accessClassInPackage.com.sun.org.apache.xpath.internal"; 102 permission java.lang.RuntimePermission 103 "accessClassInPackage.com.sun.org.apache.xpath.internal.*"; 104 }; 105 106 grant codeBase "jrt:/java.xml.ws" { 107 permission java.net.NetPermission 108 "getProxySelector"; 109 permission java.lang.RuntimePermission 110 "accessClassInPackage.sun.misc"; 111 permission java.lang.RuntimePermission 112 "accessClassInPackage.com.sun.xml.internal.*"; 113 permission java.lang.RuntimePermission 114 "accessClassInPackage.com.sun.istack.internal"; 115 permission java.lang.RuntimePermission 116 "accessClassInPackage.com.sun.istack.internal.*"; 117 permission java.lang.RuntimePermission "accessDeclaredMembers"; 118 permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; 119 permission java.util.PropertyPermission "*", "read"; 120 }; 121 122 grant codeBase "jrt:/jdk.charsets" { 123 permission java.util.PropertyPermission "os.name", "read"; 124 permission java.util.PropertyPermission "sun.nio.cs.map", "read"; 125 permission java.lang.RuntimePermission "charsetProvider"; 126 permission java.lang.RuntimePermission 127 "accessClassInPackage.jdk.internal.misc"; 128 permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.cs"; 129 }; 130 131 grant codeBase "jrt:/jdk.crypto.ec" { 132 permission java.lang.RuntimePermission 133 "accessClassInPackage.sun.security.*"; 134 permission java.lang.RuntimePermission "loadLibrary.sunec"; 135 permission java.security.SecurityPermission "putProviderProperty.SunEC"; 136 permission java.security.SecurityPermission "clearProviderProperties.SunEC"; 137 permission java.security.SecurityPermission "removeProviderProperty.SunEC"; 138 }; 139 140 grant codeBase "jrt:/jdk.crypto.cryptoki" { 141 permission java.lang.RuntimePermission 142 "accessClassInPackage.sun.security.*"; 143 permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.ch"; 144 permission java.lang.RuntimePermission "loadLibrary.j2pkcs11"; 145 permission java.util.PropertyPermission "sun.security.pkcs11.allowSingleThreadedModules", "read"; 146 permission java.util.PropertyPermission "os.name", "read"; 147 permission java.util.PropertyPermission "os.arch", "read"; 148 permission java.security.SecurityPermission "putProviderProperty.*"; 149 permission java.security.SecurityPermission "clearProviderProperties.*"; 150 permission java.security.SecurityPermission "removeProviderProperty.*"; 151 permission java.security.SecurityPermission 152 "getProperty.auth.login.defaultCallbackHandler"; 153 permission java.security.SecurityPermission "authProvider.*"; 154 // Needed for reading PKCS11 config file and NSS library check 155 permission java.io.FilePermission "<<ALL FILES>>", "read"; 156 }; 157 158 grant codeBase "jrt:/jdk.dynalink" { 159 permission java.security.AllPermission; 160 }; 161 162 grant codeBase "jrt:/jdk.internal.le" { 163 permission java.security.AllPermission; 164 }; 165 166 grant codeBase "jrt:/jdk.jsobject" { 167 permission java.security.AllPermission; 168 }; 169 170 grant codeBase "jrt:/jdk.localedata" { 171 permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*"; 172 permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*"; 173 }; 174 175 grant codeBase "jrt:/jdk.naming.dns" { 176 permission java.security.AllPermission; 177 }; 178 179 grant codeBase "jrt:/jdk.scripting.nashorn" { 180 permission java.security.AllPermission; 181 }; 182 183 grant codeBase "jrt:/jdk.scripting.nashorn.shell" { 184 permission java.security.AllPermission; 185 }; 186 187 grant codeBase "jrt:/jdk.security.auth" { 188 permission java.security.AllPermission; 189 }; 190 191 grant codeBase "jrt:/jdk.security.jgss" { 192 permission java.security.AllPermission; 193 }; 194 195 grant codeBase "jrt:/jdk.zipfs" { 196 permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete"; 197 permission java.lang.RuntimePermission "fileSystemProvider"; 198 permission java.util.PropertyPermission "os.name", "read"; 199 }; 200 201 grant codeBase "jrt:/jdk.accessibility" { 202 permission java.lang.RuntimePermission "accessClassInPackage.sun.awt"; 203 }; 204 205 grant codeBase "jrt:/jdk.desktop" { 206 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.awt"; 207 }; 208 209 // permissions needed by applications using java.desktop module 210 grant { 211 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans"; 212 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans.*"; 213 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.java.swing.plaf.*"; 214 permission java.lang.RuntimePermission "accessClassInPackage.com.apple.*"; 215 }; 216 217 grant codeBase "jrt:/jdk.internal.vm.compiler" { 218 permission java.security.AllPermission; 219 };