How to change java policy permissions with wildfly 10 and jdk 8

[gipathak]

Hi ,

Can anyone help me here how can i change java policies with wildfly 10 as this is the requirement of my product , I don't want to use default permission which  comes under jre/lib/security folder namely java.policy having all permissions enabled . How can i override default permissions.

Thanks & Regards,

Girish Pathak

[mayerw01]

You can use the Java policytool Policy Tool - Policy File Creation and ManagementTool

[gipathak]

Thanks Mayer it helped me , now I am able to create custom policy file .

But may i know please how can i link that custom policy file to wildfly 10 configuration? I have placed custom policy file in JBOSS_HOME directory and given the below options in standalone.conf.bat file:

set  "JAVA_OPTS=%JAVA_OPTS% -Djava.security.policy==$JBOSS_HOME/customServer.policy"

set "SECMGR=true"

It is not listening my customServer.policy file configuration .

[mayerw01]

Apparently there are some typos in the above command. I think for Windows it should look like

set  "JAVA_OPTS=%JAVA_OPTS% -Djava.security.manager -Djava.security.policy=%JBOSS_HOME%\customServer.policy"

Please see also Default Policy Implementation and Policy File Syntax  for more details

[gipathak]

Hi Mayer,

I tried running following  command getting following error :

C:\wildfly-10.0.0.Final\bin>standalone.bat

Calling "C:\wildfly-10.0.0.Final\bin\standalone.conf.bat"

Setting JAVA property to "C:\Program Files\Java\jdk1.8.0_121\bin\java"

ERROR: The use of -Djava.security.manager has been removed. Please use the -secmgr command line argument or SECMGR=true environment variable.

[mayerw01]

Apparently this had really be changed in WildFly Java Security Manager and WildFly9