From a90dc641f24c28a4e2fd7d3440c34777df2b1b28 Mon Sep 17 00:00:00 2001
From: Christoph Langer <christoph.langer@sap.com>
Date: Sun, 17 May 2026 15:02:11 +0200
Subject: [PATCH] SapMachine #2218: Fix missing policy permission for zipfs
 symlink support in sapmachine21

---
 src/java.base/share/lib/security/default.policy | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/java.base/share/lib/security/default.policy b/src/java.base/share/lib/security/default.policy
index 35db16af4bd..62ba2b55b2a 100644
--- a/src/java.base/share/lib/security/default.policy
+++ b/src/java.base/share/lib/security/default.policy
@@ -225,6 +225,8 @@ grant codeBase "jrt:/jdk.security.jgss" {
 
 grant codeBase "jrt:/jdk.zipfs" {
     permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
+    // SapMachine 2026-04-13: symlink support for zipfs entries in sapext.
+    permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.access";
     permission java.lang.RuntimePermission "fileSystemProvider";
     permission java.lang.RuntimePermission "accessUserInformation";
     permission java.util.PropertyPermission "os.name", "read";