1 grant { 2 permission java.io.FilePermission "${java.home}/-", "read"; 3 };