Questions tagged [securitymanager]

A security manager is an object that defines a security policy for an application. This policy specifies actions that are unsafe or sensitive. Any actions not allowed by the security policy cause a SecurityException to be thrown. An application can also query its security manager to discover which actions are allowed.

218 questions
2
votes
1 answer

Java security manager find out who asks for access

i wrote a own Security Manager and my problem is, that i run code from other users in my program, and i have to ensure that there is no abuse. So my Question is: How i am able to find out in the Methods of the Security Manager , who asks for the…
Nicolas
  • 269
  • 4
  • 14
2
votes
0 answers

Are there any JBoss 5.1 Community Edition SecurityManager .policy file examples available?

Googling "jboss security manager" brings up http://docs.jboss.org/jbossweb/2.1.x/security-manager-howto.html, but this is way out of date.
Stephen Swensen
  • 22,107
  • 9
  • 81
  • 136
2
votes
3 answers

Java SecurityManager multiple threads

I have been trying to use a custom SecurityManager to sandbox some externally loaded code. The SecurityManager I have works fine. I have taken the same approach as numerous posts here suggested: set the custom manager whenever the potentially…
coderino
  • 57
  • 7
2
votes
1 answer

SecurityManager problem with SWT embedded Mozilla browser running over Java WebStart (jnlp)

I am developing non-standard application. Basically it's SWT application using embedded Mozilla browser (mozilla-interfaces-1.9.2.12.jar, mozilla-glue-1.9.2.12.jar) that should display html pages containing applets (developed by myself as…
Vojta
  • 21
  • 1
2
votes
2 answers

MQQueueManager constructor hangs when a SecurityManager is installed

Host foo is an IBM MQ client (i.e. client mode connection over TCP/IP). Host bar is the system on which the queue manager is running. Bar grants permission (by IP address) for foo to instantiate a com.ibm.mq.MQQueueManager object but does not grant…
Alan Feldstein
  • 93
  • 1
  • 10
2
votes
1 answer

JVM Security Manager File permissions - custom policy

I've found a somehow unexpected behaviour using JVM Security Manager custom policies. repo: https://github.com/pedrorijo91/jvm-sec-manager in branch master, go into the /code folder: custom policy file grants File read permission for file…
pedrorijo91
  • 7,635
  • 9
  • 44
  • 82
2
votes
1 answer

Obtaining an instance of CommPortIdentifier on Android

I'm using Jamod 1.2 to establish Modbus TCP connection between an Android device and PLC. Everything was fine until I was asked to migrate to Modbus RTU (connecting via USB). Jamod has classes to work with Modbus RTU but I've encountered a specific…
DH28
  • 553
  • 3
  • 16
2
votes
0 answers

Java SecurityManager with SpringSecurity

I try join Java Security Manager to project with SpringSecurity (SS). I have the goal: my project works with SS and has dataSource (db2 database) as authentication-manager. I added ScriptManager(ScriptEngine) to project. Now I tries to setup…
user533311
  • 21
  • 3
2
votes
1 answer

How a particular field is filtered from reflection access?

How Java restrict reflection access to the field private final ClassLoader classLoader in Class.java? (As shown in documentation in screenshot) I have found a link which describes that a SecurityManager can be used to restrict reflection access but…
ankur_rajput
  • 145
  • 2
  • 11
2
votes
2 answers

Does Java Security Manager decrease performance?

Does implementing the Java Security Manager result in decreased performance?
instantsetsuna
  • 9,183
  • 8
  • 25
  • 28
2
votes
1 answer

Can java security manager be enabled by default at the installation level?

As per understanding its possible to manipulate the general notion of final keyword using reflection. Also its possible to prevent the same using a security manager. Is it possible to enable the security manager by default (at the jdk-installation…
Ravindra HV
  • 2,558
  • 1
  • 17
  • 26
2
votes
1 answer

Policy.setPolicy() doesn't seem to work properly

I want to set a custom Policy by defining my own class that extends the Policy class as follows: public class MyPolicy extends Policy { public MyPolicy() { super(); } @Override public PermissionCollection…
pbgus
  • 23
  • 4
2
votes
1 answer

Can I update Java's SecurityManager to reduce privileges after initialization?

I'm writing a Java program that calls library code that is not mine; and so I am running the program in a SecurityManager with only the minimum required permissions. There is one particular permission which I only need in the first couple lines of…
Douglas Held
  • 1,452
  • 11
  • 25
2
votes
1 answer

java.lang.ClassNotFoundException: (no security manager: RMI class loader disabled)

I met this issue and tried for long time, still couldn't solve it. All the solutions in similar topics in stackoverfflow have been tried but not useful for me. Any help would be really appreciate!! Errors: Set initial logic:…
Tony Yang
  • 23
  • 1
  • 1
  • 5
2
votes
1 answer

Why shouldn't I use default java security manager

Part of my project need to allow participant upload simple and very basic java code and I will run their code and return the result for them. I reduce the security risk by limiting the permission of web user account, using thread to control time out…
user3794582
  • 123
  • 1
  • 10