3 // by the platform class loader.
4 //
5 // NOTE that this file is not intended to be modified. If additional
6 // permissions need to be granted to the modules in this file, it is
7 // recommended that they be configured in a separate policy file or
8 // ${java.home}/conf/security/java.policy.
9 //
10
11 grant codeBase "jrt:/java.activation" {
12 permission java.security.AllPermission;
13 };
14
15 grant codeBase "jrt:/java.compiler" {
16 permission java.security.AllPermission;
17 };
18
19 grant codeBase "jrt:/java.corba" {
20 permission java.security.AllPermission;
21 };
22
23 grant codeBase "jrt:/jdk.incubator.httpclient" {
24 };
25
26 grant codeBase "jrt:/java.scripting" {
27 permission java.security.AllPermission;
28 };
29
30 grant codeBase "jrt:/java.security.jgss" {
31 permission java.security.AllPermission;
32 };
33
34 grant codeBase "jrt:/java.smartcardio" {
35 permission javax.smartcardio.CardPermission "*", "*";
36 permission java.lang.RuntimePermission "loadLibrary.j2pcsc";
37 permission java.lang.RuntimePermission
38 "accessClassInPackage.sun.security.jca";
39 permission java.lang.RuntimePermission
40 "accessClassInPackage.sun.security.util";
41 permission java.util.PropertyPermission
42 "javax.smartcardio.TerminalFactory.DefaultType", "read";
43 permission java.util.PropertyPermission "os.name", "read";
44 permission java.util.PropertyPermission "os.arch", "read";
45 permission java.util.PropertyPermission "sun.arch.data.model", "read";
52 permission java.util.PropertyPermission
53 "sun.security.smartcardio.t1StripLe", "read";
54 // needed for looking up native PC/SC library
55 permission java.io.FilePermission "<<ALL FILES>>","read";
56 permission java.security.SecurityPermission "putProviderProperty.SunPCSC";
57 permission java.security.SecurityPermission
58 "clearProviderProperties.SunPCSC";
59 permission java.security.SecurityPermission
60 "removeProviderProperty.SunPCSC";
61 };
62
63 grant codeBase "jrt:/java.sql" {
64 permission java.security.AllPermission;
65 };
66
67 grant codeBase "jrt:/java.sql.rowset" {
68 permission java.security.AllPermission;
69 };
70
71 grant codeBase "jrt:/java.xml.bind" {
72 permission java.lang.RuntimePermission
73 "accessClassInPackage.sun.misc";
74 permission java.lang.RuntimePermission
75 "accessClassInPackage.com.sun.xml.internal.*";
76 permission java.lang.RuntimePermission
77 "accessClassInPackage.com.sun.istack.internal";
78 permission java.lang.RuntimePermission
79 "accessClassInPackage.com.sun.istack.internal.*";
80 permission java.lang.RuntimePermission "accessDeclaredMembers";
81 permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
82 permission java.util.PropertyPermission "*", "read";
83 };
84
85 grant codeBase "jrt:/java.xml.crypto" {
86 permission java.lang.RuntimePermission
87 "accessClassInPackage.sun.security.util";
88 permission java.util.PropertyPermission "*", "read";
89 permission java.security.SecurityPermission "putProviderProperty.XMLDSig";
90 permission java.security.SecurityPermission
91 "clearProviderProperties.XMLDSig";
92 permission java.security.SecurityPermission
93 "removeProviderProperty.XMLDSig";
94 permission java.security.SecurityPermission
95 "com.sun.org.apache.xml.internal.security.register";
96 permission java.security.SecurityPermission
97 "getProperty.jdk.xml.dsig.secureValidationPolicy";
98 permission java.lang.RuntimePermission
99 "accessClassInPackage.com.sun.org.apache.xml.internal.*";
100 permission java.lang.RuntimePermission
101 "accessClassInPackage.com.sun.org.apache.xpath.internal";
102 permission java.lang.RuntimePermission
103 "accessClassInPackage.com.sun.org.apache.xpath.internal.*";
104 };
105
106 grant codeBase "jrt:/java.xml.ws" {
107 permission java.net.NetPermission
108 "getProxySelector";
109 permission java.lang.RuntimePermission
110 "accessClassInPackage.sun.misc";
111 permission java.lang.RuntimePermission
112 "accessClassInPackage.com.sun.xml.internal.*";
113 permission java.lang.RuntimePermission
114 "accessClassInPackage.com.sun.istack.internal";
115 permission java.lang.RuntimePermission
116 "accessClassInPackage.com.sun.istack.internal.*";
117 permission java.lang.RuntimePermission "accessDeclaredMembers";
118 permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
119 permission java.util.PropertyPermission "*", "read";
120 };
121
122 grant codeBase "jrt:/jdk.charsets" {
123 permission java.util.PropertyPermission "os.name", "read";
124 permission java.util.PropertyPermission "sun.nio.cs.map", "read";
125 permission java.lang.RuntimePermission "charsetProvider";
126 permission java.lang.RuntimePermission
127 "accessClassInPackage.jdk.internal.misc";
128 permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.cs";
129 };
130
131 grant codeBase "jrt:/jdk.crypto.ec" {
132 permission java.lang.RuntimePermission
133 "accessClassInPackage.sun.security.*";
134 permission java.lang.RuntimePermission "loadLibrary.sunec";
135 permission java.security.SecurityPermission "putProviderProperty.SunEC";
136 permission java.security.SecurityPermission "clearProviderProperties.SunEC";
137 permission java.security.SecurityPermission "removeProviderProperty.SunEC";
138 };
139
140 grant codeBase "jrt:/jdk.crypto.cryptoki" {
141 permission java.lang.RuntimePermission
142 "accessClassInPackage.sun.security.*";
143 permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.ch";
144 permission java.lang.RuntimePermission "loadLibrary.j2pkcs11";
145 permission java.util.PropertyPermission "sun.security.pkcs11.allowSingleThreadedModules", "read";
146 permission java.util.PropertyPermission "os.name", "read";
147 permission java.util.PropertyPermission "os.arch", "read";
148 permission java.security.SecurityPermission "putProviderProperty.*";
149 permission java.security.SecurityPermission "clearProviderProperties.*";
150 permission java.security.SecurityPermission "removeProviderProperty.*";
151 permission java.security.SecurityPermission
152 "getProperty.auth.login.defaultCallbackHandler";
153 permission java.security.SecurityPermission "authProvider.*";
154 // Needed for reading PKCS11 config file and NSS library check
155 permission java.io.FilePermission "<<ALL FILES>>", "read";
156 };
157
158 grant codeBase "jrt:/jdk.dynalink" {
159 permission java.security.AllPermission;
160 };
161
162 grant codeBase "jrt:/jdk.internal.le" {
163 permission java.security.AllPermission;
164 };
165
166 grant codeBase "jrt:/jdk.jsobject" {
167 permission java.security.AllPermission;
168 };
169
170 grant codeBase "jrt:/jdk.localedata" {
171 permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*";
172 permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*";
173 };
174
175 grant codeBase "jrt:/jdk.naming.dns" {
176 permission java.security.AllPermission;
177 };
178
179 grant codeBase "jrt:/jdk.scripting.nashorn" {
180 permission java.security.AllPermission;
181 };
182
183 grant codeBase "jrt:/jdk.scripting.nashorn.shell" {
184 permission java.security.AllPermission;
185 };
186
187 grant codeBase "jrt:/jdk.security.auth" {
188 permission java.security.AllPermission;
189 };
190
191 grant codeBase "jrt:/jdk.security.jgss" {
192 permission java.security.AllPermission;
193 };
194
195 grant codeBase "jrt:/jdk.zipfs" {
196 permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
197 permission java.lang.RuntimePermission "fileSystemProvider";
198 permission java.util.PropertyPermission "os.name", "read";
199 };
200
201 grant codeBase "jrt:/jdk.accessibility" {
202 permission java.lang.RuntimePermission "accessClassInPackage.sun.awt";
203 };
204
205 grant codeBase "jrt:/jdk.desktop" {
206 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.awt";
207 };
208
209 // permissions needed by applications using java.desktop module
210 grant {
211 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans";
212 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans.*";
213 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.java.swing.plaf.*";
214 permission java.lang.RuntimePermission "accessClassInPackage.com.apple.*";
215 };
216
217 grant codeBase "jrt:/jdk.internal.vm.compiler" {
218 permission java.security.AllPermission;
219 };
|
3 // by the platform class loader.
4 //
5 // NOTE that this file is not intended to be modified. If additional
6 // permissions need to be granted to the modules in this file, it is
7 // recommended that they be configured in a separate policy file or
8 // ${java.home}/conf/security/java.policy.
9 //
10
11 grant codeBase "jrt:/java.activation" {
12 permission java.security.AllPermission;
13 };
14
15 grant codeBase "jrt:/java.compiler" {
16 permission java.security.AllPermission;
17 };
18
19 grant codeBase "jrt:/java.corba" {
20 permission java.security.AllPermission;
21 };
22
23 grant codeBase "jrt:/java.scripting" {
24 permission java.security.AllPermission;
25 };
26
27 grant codeBase "jrt:/java.security.jgss" {
28 permission java.security.AllPermission;
29 };
30
31 grant codeBase "jrt:/java.smartcardio" {
32 permission javax.smartcardio.CardPermission "*", "*";
33 permission java.lang.RuntimePermission "loadLibrary.j2pcsc";
34 permission java.lang.RuntimePermission
35 "accessClassInPackage.sun.security.jca";
36 permission java.lang.RuntimePermission
37 "accessClassInPackage.sun.security.util";
38 permission java.util.PropertyPermission
39 "javax.smartcardio.TerminalFactory.DefaultType", "read";
40 permission java.util.PropertyPermission "os.name", "read";
41 permission java.util.PropertyPermission "os.arch", "read";
42 permission java.util.PropertyPermission "sun.arch.data.model", "read";
49 permission java.util.PropertyPermission
50 "sun.security.smartcardio.t1StripLe", "read";
51 // needed for looking up native PC/SC library
52 permission java.io.FilePermission "<<ALL FILES>>","read";
53 permission java.security.SecurityPermission "putProviderProperty.SunPCSC";
54 permission java.security.SecurityPermission
55 "clearProviderProperties.SunPCSC";
56 permission java.security.SecurityPermission
57 "removeProviderProperty.SunPCSC";
58 };
59
60 grant codeBase "jrt:/java.sql" {
61 permission java.security.AllPermission;
62 };
63
64 grant codeBase "jrt:/java.sql.rowset" {
65 permission java.security.AllPermission;
66 };
67
68 grant codeBase "jrt:/java.xml.bind" {
69 permission java.security.AllPermission;
70 };
71
72 grant codeBase "jrt:/java.xml.crypto" {
73 permission java.lang.RuntimePermission
74 "accessClassInPackage.sun.security.util";
75 permission java.util.PropertyPermission "*", "read";
76 permission java.security.SecurityPermission "putProviderProperty.XMLDSig";
77 permission java.security.SecurityPermission
78 "clearProviderProperties.XMLDSig";
79 permission java.security.SecurityPermission
80 "removeProviderProperty.XMLDSig";
81 permission java.security.SecurityPermission
82 "com.sun.org.apache.xml.internal.security.register";
83 permission java.security.SecurityPermission
84 "getProperty.jdk.xml.dsig.secureValidationPolicy";
85 permission java.lang.RuntimePermission
86 "accessClassInPackage.com.sun.org.apache.xml.internal.*";
87 permission java.lang.RuntimePermission
88 "accessClassInPackage.com.sun.org.apache.xpath.internal";
89 permission java.lang.RuntimePermission
90 "accessClassInPackage.com.sun.org.apache.xpath.internal.*";
91 };
92
93 grant codeBase "jrt:/java.xml.ws" {
94 permission java.security.AllPermission;
95 };
96
97 grant codeBase "jrt:/jdk.accessibility" {
98 permission java.lang.RuntimePermission "accessClassInPackage.sun.awt";
99 };
100
101 grant codeBase "jrt:/jdk.charsets" {
102 permission java.util.PropertyPermission "os.name", "read";
103 permission java.util.PropertyPermission "sun.nio.cs.map", "read";
104 permission java.lang.RuntimePermission "charsetProvider";
105 permission java.lang.RuntimePermission
106 "accessClassInPackage.jdk.internal.misc";
107 permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.cs";
108 };
109
110 grant codeBase "jrt:/jdk.crypto.ec" {
111 permission java.lang.RuntimePermission
112 "accessClassInPackage.sun.security.*";
113 permission java.lang.RuntimePermission "loadLibrary.sunec";
114 permission java.security.SecurityPermission "putProviderProperty.SunEC";
115 permission java.security.SecurityPermission "clearProviderProperties.SunEC";
116 permission java.security.SecurityPermission "removeProviderProperty.SunEC";
117 };
118
119 grant codeBase "jrt:/jdk.crypto.cryptoki" {
120 permission java.lang.RuntimePermission
121 "accessClassInPackage.sun.security.*";
122 permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.ch";
123 permission java.lang.RuntimePermission "loadLibrary.j2pkcs11";
124 permission java.util.PropertyPermission "sun.security.pkcs11.allowSingleThreadedModules", "read";
125 permission java.util.PropertyPermission "os.name", "read";
126 permission java.util.PropertyPermission "os.arch", "read";
127 permission java.security.SecurityPermission "putProviderProperty.*";
128 permission java.security.SecurityPermission "clearProviderProperties.*";
129 permission java.security.SecurityPermission "removeProviderProperty.*";
130 permission java.security.SecurityPermission
131 "getProperty.auth.login.defaultCallbackHandler";
132 permission java.security.SecurityPermission "authProvider.*";
133 // Needed for reading PKCS11 config file and NSS library check
134 permission java.io.FilePermission "<<ALL FILES>>", "read";
135 };
136
137 grant codeBase "jrt:/jdk.desktop" {
138 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.awt";
139 };
140
141 grant codeBase "jrt:/jdk.dynalink" {
142 permission java.security.AllPermission;
143 };
144
145 grant codeBase "jrt:/jdk.incubator.httpclient" {
146 };
147
148 grant codeBase "jrt:/jdk.internal.le" {
149 permission java.security.AllPermission;
150 };
151
152 grant codeBase "jrt:/jdk.internal.vm.compiler" {
153 permission java.security.AllPermission;
154 };
155
156 grant codeBase "jrt:/jdk.jsobject" {
157 permission java.security.AllPermission;
158 };
159
160 grant codeBase "jrt:/jdk.localedata" {
161 permission java.lang.RuntimePermission "accessClassInPackage.sun.text.*";
162 permission java.lang.RuntimePermission "accessClassInPackage.sun.util.*";
163 };
164
165 grant codeBase "jrt:/jdk.naming.dns" {
166 permission java.security.AllPermission;
167 };
168
169 grant codeBase "jrt:/jdk.scripting.nashorn" {
170 permission java.security.AllPermission;
171 };
172
173 grant codeBase "jrt:/jdk.scripting.nashorn.shell" {
174 permission java.security.AllPermission;
175 };
176
177 grant codeBase "jrt:/jdk.security.auth" {
178 permission java.security.AllPermission;
179 };
180
181 grant codeBase "jrt:/jdk.security.jgss" {
182 permission java.security.AllPermission;
183 };
184
185 grant codeBase "jrt:/jdk.zipfs" {
186 permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
187 permission java.lang.RuntimePermission "fileSystemProvider";
188 permission java.util.PropertyPermission "os.name", "read";
189 };
190
191 // permissions needed by applications using java.desktop module
192 grant {
193 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans";
194 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans.*";
195 permission java.lang.RuntimePermission "accessClassInPackage.com.sun.java.swing.plaf.*";
196 permission java.lang.RuntimePermission "accessClassInPackage.com.apple.*";
197 };
|