2 Replies Latest reply on Jun 2, 2004 12:52 PM by Holger Baxmann

    JVM security

    Holger Baxmann Novice

      Hi all,

      are there any efforts underway to change the JBoss JVM policy

      grant {
      // Allow everything for now
      permission java.security.AllPermission;
      };

      Readings for the impatient:

      http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf
      http://www.lsd-pl.net/documents/javasecurity.ppt

      thanks

      bax

        • 1. Re: JVM security
          Scott Stark Master

          That vm policy is unused. You have to specify the security manager and policy as part of the jvm options. I'm cleaning up some priviledged block usage for the 3.2.4 release so that j2ee components can run from a codebase with minimal permissions.

          • 2. Re: JVM security
            Holger Baxmann Novice

            I have a problem of, maybe english, understanding: if you are cleaning up priviledged block usage you will end up with maximum of permissions, but minimum count of java.security permissions -> more less control ?

            Am I wrong?

            Or do you mean a minimal set of permissions?

            bax