Permalink
Browse files

#3950 fixed RSB and RServi security policies

  • Loading branch information...
1 parent b4050e8 commit 305b92ab470aa562c441fd1d39c1eb1dd4bb69c4 @ddossot ddossot committed Nov 2, 2013
Showing with 4 additions and 5 deletions.
  1. +4 −5 src/misc/catalina.policy
@@ -248,8 +248,7 @@ grant codeBase "file:${catalina.home}/webapps/manager/-" {
grant codeBase "file:${catalina.home}/webapps/rsb/-" {
- permission java.lang.RuntimePermission "accessClassInPackage.com.sun.jmx.mbeanserver";
- permission java.lang.RuntimePermission "accessClassInPackage.sun.rmi.registry";
+ permission java.lang.RuntimePermission "accessClassInPackage.*";
permission java.lang.RuntimePermission "accessDeclaredMembers";
permission java.lang.RuntimePermission "getenv.spring.liveBeansView.mbeanDomain";
permission java.lang.RuntimePermission "getClassLoader";
@@ -284,12 +283,12 @@ grant codeBase "file:${catalina.home}/webapps/rsb/-" {
grant codeBase "file:${catalina.home}/webapps/rservi/-" {
- permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.util.buf";
- permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.util";
- permission java.lang.RuntimePermission "accessClassInPackage.org.apache.jasper.compiler";
+ permission java.lang.RuntimePermission "accessClassInPackage.*";
permission java.lang.RuntimePermission "getenv.*";
permission java.lang.RuntimePermission "modifyThread";
+ permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
+
permission java.util.PropertyPermission "*", "read";
permission java.util.PropertyPermission "java.rmi.server.codebase", "write";
permission java.util.PropertyPermission "java.rmi.server.hostname", "write";

0 comments on commit 305b92a

Please sign in to comment.