-
Enhancement
-
Resolution: Fixed
-
P3
-
9
| Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
|---|---|---|---|---|---|---|
| JDK-8218639 | 11 | Raymond Gallardo | P3 | Resolved | Fixed |
In JDK 9 you will be able to specify a module URL as the codeBase in a policy file, ex:
grant codeBase "jrt:jdk.zipfs" {
permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
permission java.lang.RuntimePermission "fileSystemProvider";
permission java.util.PropertyPermission "*", "read";
};
All classes in the module named jdk.zipfs are granted the specified permissions.
The "Default Policy Implementation and Policy File Syntax" guide should be updated to include details of the module URL and some examples.
grant codeBase "jrt:jdk.zipfs" {
permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
permission java.lang.RuntimePermission "fileSystemProvider";
permission java.util.PropertyPermission "*", "read";
};
All classes in the module named jdk.zipfs are granted the specified permissions.
The "Default Policy Implementation and Policy File Syntax" guide should be updated to include details of the module URL and some examples.
- backported by
-
JDK-8218639 Update security guides with information about using module URLs in policy files
-
- Resolved
-
- relates to
-
JDK-8166632 Document how to grant permissions for a module jrt:/<module> in the image
-
- Closed
-