Examples of java.util.PropertyPermission

java.util.PropertyPermission
This class is for property permissions.
The name is the name of the property ("java.home", "os.name", etc). The naming convention follows the hierarchical property naming convention. Also, an asterisk may appear at the end of the name, following a ".", or by itself, to signify a wildcard match. For example: "java.*" or "*" is valid, "*java" or "a*b" is not valid.

The actions to be granted are passed to the constructor in a string containing a list of zero or more comma-separated keywords. The possible keywords are "read" and "write". Their meaning is defined as follows:

read
read permission. Allows System.getProperty to be called.
write
write permission. Allows System.setProperty to be called.

The actions string is converted to lowercase before processing.
Care should be taken before granting code permission to access certain system properties. For example, granting permission to access the "java.home" system property gives potentially malevolent code sensitive information about the system environment (the Java installation directory). Also, granting permission to access the "user.name" and "user.home" system properties gives potentially malevolent code sensitive information about the user environment (the user's account name and home directory). @see java.security.BasicPermission @see java.security.Permission @see java.security.Permissions @see java.security.PermissionCollection @see java.lang.SecurityManager @version 1.35 06/04/21 @author Roland Schemers @since 1.2 @serial exclude

            property = AccessController.doPrivileged(new PrivilegedAction<String>() {


                public String run() {
                    return System.getProperty(propName);
                }
            }, null, new PropertyPermission(propName, "read"));
        } catch (SecurityException se) {
            trace("error getting " + propName + ":  "+ se);
            if (debug) {
                se.printStackTrace();
            }

View Full Code Here

     * @see        java.lang.System#getProperties()
     * @see        java.lang.System#setProperties(java.util.Properties)
     * @see        #checkPermission(java.security.Permission) checkPermission
     */
    public void checkPropertiesAccess() {
        checkPermission(new PropertyPermission("*",
            SecurityConstants.PROPERTY_RW_ACTION));
    }

View Full Code Here

     *
     * @see        java.lang.System#getProperty(java.lang.String)
     * @see        #checkPermission(java.security.Permission) checkPermission
     */
    public void checkPropertyAccess(String key) {
        checkPermission(new PropertyPermission(key,
            SecurityConstants.PROPERTY_READ_ACTION));
    }

View Full Code Here

                    return null;
                }
            }, null,
            new FilePermission("<<ALL FILES>>", "read, write"),
            // createDirectories may need it
            new PropertyPermission("user.dir", "read"));
        }


        return UNSAFE.defineAnonymousClass(targetClass, classBytes, null);
    }

View Full Code Here

  RuntimePermission rp = new RuntimePermission("getClassLoader");
  p.add( rp );
  
  // JspFactory.getPageContext() runs in JSP Context and needs the below
  // permission during the init of a servlet generated from a JSP.
  PropertyPermission pp = new PropertyPermission("line.separator","read");
  p.add(pp);
  pp = new PropertyPermission("file.separator", "read");
  p.add(pp);
  pp = new PropertyPermission("path.separator", "read");
  p.add(pp);


  if( debug > 0 || context.getDebug() > 0 )
      context.log( "permissions " + p );

View Full Code Here

  public void test_Constructor$Ljava_security_ProtectionDomain() {
    // Test for method
    // java.security.AccessControlContext(java.security.ProtectionDomain [])


    // Create a permission which is not normally granted
    final Permission perm = new PropertyPermission("java.class.path",
        "read");
    PermissionCollection col = perm.newPermissionCollection();
    col.add(perm);
    final ProtectionDomain pd = new ProtectionDomain(null, col);
    AccessControlContext acc = new AccessControlContext(
        new ProtectionDomain[] { pd });
    try {

View Full Code Here

        if (prop.length() == 0) {
            throw new IllegalArgumentException();
        }
        SecurityManager secMgr = System.getSecurityManager();
        if (secMgr != null) {
            secMgr.checkPermission(new PropertyPermission(prop, "write"));
        }
        return (String) systemProperties.setProperty(prop, value);
    }

View Full Code Here

            throw new IllegalArgumentException();
        }


        SecurityManager secMgr = System.getSecurityManager();
        if (secMgr != null) {
            secMgr.checkPermission(new PropertyPermission(key, "write"));
        }
        return (String) systemProperties.remove(key);
    }

View Full Code Here

        result.add(new TcPermission("http://example.org/area/allowed/*", "readwrite"));
        result.add(new TcPermission("urn:x-localinstance:/graph-access.graph", "readwrite"));
        //result.add(new AllPermission());
        result.add(new RuntimePermission("*"));
        result.add(new ReflectPermission("suppressAccessChecks"));
        result.add(new PropertyPermission("*", "read"));
        //(java.util.PropertyPermission line.separator read)
        result.add(new FilePermission("/-", "read,write"));
        return result;
      }
    });

View Full Code Here

        return new TestSuite(SecurityTest.class);
    }


    public void testForbiddenProperty() {
        String script = "System.getProperty(\"user.home\")";
        assertExecute(script, null, new PropertyPermission("user.home", "read"));
    }

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of java.util.PropertyPermission

AddToReadOnlyPermissionCollection

com.google.appengine.tools.development.IsolatedAppClassLoader

com.ikanow.infinit.e.utility.hadoop.HadoopPrototypingTool$MinimalPolicy

com.sshtools.j2ssh.configuration.ConfigurationLoader

com.sun.enterprise.J2EESecurityManager

com.sun.enterprise.security.provider.PolicyFile

com.sun.enterprise.security.ssl.impl.SecuritySupportImpl

com.sun.enterprise.security.ssl.SSLUtils

com.sun.jini.test.spec.security.security.GrantTest1

com.sun.jini.test.spec.security.security.GrantTest2

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.