SecurityManager configuration

[p2auljr]

Is it common practice to run JBOSS with a SecurityManager turned on? The documentation for running JBOSS with a SecurityManager seems to be very small.

Does anyone know how to apply grant permissions in a policy file for a particular web application? I am deploying the applications as WAR files in JBOSS's deploy directory.

Thank you.

[starksm64]

http://wiki.jboss.org/wiki/Wiki.jsp?page=ConfiguringAJavaSecurityManager

[p2auljr]

Is there a way to grant a WAR file particular permissions?

I want to be able to specify a grant entry as such:

grant codeBase "file:${jboss.server.home.dir}/app-deploy/myapp.war" {
permission java.util.PropertyPermission "*", "read";
// additional app specific permissions
};

However, this grant doesn't work because the application is deployed to the tmp directory. The only way I can get it to work is if I use an exploded directory rather than a WAR. I would prefer not to have to do that.

Thanks for your help.