Questions tagged [java-security-manager]

69 questions
0
votes
0 answers

Why there is an redundant variable debugInit in java.security.AccessControlContext?

I was going through java.security.AccessControlContext, and encountered below piece of code: private static boolean debugInit = false; private static Debug debug = null; static Debug getDebug() { if (debugInit) return debug; else { …
Gokul Nath KP
  • 15,485
  • 24
  • 88
  • 126
0
votes
1 answer

Block some permissions and grant other permissions in java security policy

I want to implement a security policy file in the following way :- Restrict access to all files except for files in 3 directories, i.e. if code accesses files from these 3 directories, it should be allowed but file access for any other directory is…
praneel
  • 21
  • 1
  • 6
0
votes
1 answer

restrict untrusted java code to a single thread

I am looking for a way to execute untrusted java code so that the code could not use multiple thread.Is it possible to use java security manager to restrict the untrusted code to create multiple thread.any resource or hints will be helpful.
mursalin
  • 1,151
  • 1
  • 7
  • 18
0
votes
0 answers

Java - Per Thread/Loaded class permissions

I have seem to have run into a bit of a problem. I have thoroughly researched this topic, and have not found any solutions. I have a main java program, the "Server" for example, that imports java .jar "plugin" using this method: How to load Classes…
Myth Da Wolf
  • 23
  • 1
  • 7
0
votes
1 answer

Unable to deploy application when Java Security Manager is enabled on JBoss 6.x EAP

I have deployed my application on JBoss 6.x EAP. After enabling security manager, deployment fails with following exception. Caused by: java.security.AccessControlException: access denied ("org.jboss.vfs.VirtualFilePermission"…
0
votes
0 answers

Issue accessing my jks keystore in Java

I'm trying to test a HTTPS SSL connection from my local machine as I'm facing some issues implementing the same in my server. Steps I followed I downloaded the third party HTTPS server SSL certificate from the browser (DER format) and I see its…
tsjo
  • 3
  • 4
0
votes
1 answer

Java Security Manager for JRuby

I'm allowing user supplied ruby code to run in server(java scripting), and since jruby doesn't support safe-levels as in ruby I'm thinking about using java's security manager. Is this a good decision? Has anyone else implemented this? Are there any…
user314362
  • 1,205
  • 2
  • 11
  • 12
-1
votes
1 answer

Can I enforce visibility using java.security?

This follows on from this question, which is about Groovy (a superset/modernisation of Java), where there is, seemingly, essentially no information-hiding and no encapsulation whatsoever. But in Java too of course there is reflection, meaning that…
-3
votes
1 answer

JDK 17 Java Security is deprecated

We are using Java security classes in our project and in JDK 17 these are marked for removal. What is the alternative for these classes. We are using the following classes and methods in our project for Script policy security. …
user3436310
  • 65
  • 1
  • 2
  • 6
1 2 3 4
5