Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
Browse files

#3950 added RServi security policy

  • Loading branch information...
commit b4050e8dfb7c4808b805be36b98cc0be1c99517c 1 parent 01e8166
@ddossot ddossot authored
Showing with 29 additions and 0 deletions.
  1. +29 −0 src/misc/catalina.policy
View
29 src/misc/catalina.policy
@@ -277,3 +277,32 @@ grant codeBase "file:${catalina.home}/webapps/rsb/-" {
permission javax.xml.ws.WebServicePermission "*";
};
+
+
+// ========== RSERVI CODE PERMISSIONS =========================================
+
+
+
+grant codeBase "file:${catalina.home}/webapps/rservi/-" {
+ permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.util.buf";
+ permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.util";
+ permission java.lang.RuntimePermission "accessClassInPackage.org.apache.jasper.compiler";
+ permission java.lang.RuntimePermission "getenv.*";
+ permission java.lang.RuntimePermission "modifyThread";
+
+ permission java.util.PropertyPermission "*", "read";
+ permission java.util.PropertyPermission "java.rmi.server.codebase", "write";
+ permission java.util.PropertyPermission "java.rmi.server.hostname", "write";
+
+ permission java.io.FilePermission "<<ALL FILES>>", "read,write,execute,delete";
+
+ permission java.net.SocketPermission "localhost:*", "listen,connect,accept,resolve";
+ permission java.net.SocketPermission "127.0.1.1:*", "listen,connect,accept,resolve";
+ permission java.net.SocketPermission "*", "resolve";
+
+ permission javax.management.MBeanServerPermission "createMBeanServer";
+ permission javax.management.MBeanServerPermission "createMBeanServer";
+ permission javax.management.MBeanTrustPermission "register";
+ permission javax.management.MBeanPermission "*", "registerMBean,unregisterMBean,invoke";
+};
+
Please sign in to comment.
Something went wrong with that request. Please try again.