1 /*
   2  * security policy used by the test process
   3  */
   4 
   5 grant codeBase "file:${java.home}/lib/ext/*" {
   6     permission java.security.AllPermission;
   7 };
   8 
   9 grant {
  10   // Needed because of bug#: 4182104
  11   permission java.lang.RuntimePermission "modifyThreadGroup";
  12   permission java.lang.RuntimePermission "modifyThread";
  13 
  14   // properties are needed because of bug#: 4179055
  15   permission java.lang.RuntimePermission "accessClassInPackage.sun.rmi.server";
  16   permission java.util.PropertyPermission "package.restrict.access.sun", "read";
  17   permission java.util.PropertyPermission "package.restrict.access.sun.rmi", "read";
  18 
  19   // standard test activation permissions
  20   permission java.io.FilePermission "..${/}..${/}test.props", "read";
  21 
  22   // test needs to cleanup rmid's log.
  23   permission java.io.FilePermission ".${/}log", "read,write,delete";
  24   permission java.io.FilePermission ".${/}log${/}-", "read,write,delete";
  25 
  26   // test needs to use java to exec an rmid
  27   permission java.io.FilePermission "${java.home}${/}bin${/}java", "execute";
  28 
  29   // test rmid uses these properties to propagate security values to rmid
  30   permission java.util.PropertyPermission "java.security.policy", "read";
  31   permission java.util.PropertyPermission "java.security.manager", "read";
  32 
  33   // used by TestLibrary to determine test environment
  34   permission java.util.PropertyPermission "test.classes", "read";
  35   permission java.util.PropertyPermission "test.src", "read";
  36   permission java.util.PropertyPermission "user.dir", "read";
  37   permission java.util.PropertyPermission "java.home", "read";
  38   permission java.util.PropertyPermission "java.rmi.activation.port", "write";
  39 
  40   // Needed to create an activation group
  41   permission java.lang.RuntimePermission "setFactory";
  42 
  43   // allow exporting of remote objects on an arbitrary port.
  44   permission java.net.SocketPermission "*:1024-", "connect,accept,listen";
  45 };