I'll take a look. thanks, Boris
On 10/25/06, Paulex Yang <[EMAIL PROTECTED]> wrote:
Any security guys can help to look at this issue? thanks in advance. I haven't found time to looked closer to find the cause yet, but it seems a little serious. Paulex Yang (JIRA) wrote: > [classlib][security] Harmony cannot read security policy file correctly > ----------------------------------------------------------------------- > > Key: HARMONY-1963 > URL: http://issues.apache.org/jira/browse/HARMONY-1963 > Project: Harmony > Issue Type: Bug > Components: Classlib > Environment: Harmony classlib + IBM VME, windows XP+sp2 > Reporter: Paulex Yang > > > I created simple a java.policy file[1], and try to run SecurityManagerTest with argument: > > -Djava.security.manager -Dtest.bin.dir=<path to test bin directory> -Djava.security.policy=<path to policy file> > > public class SecurityManagerTest { > public static void main(String[] args) throws Exception{ > System.out.println(System.getProperty("os.name")); //read access for this property has been granted by default policy > System.out.println(System.getProperty("notexist")); // no access for this property has been granted by default policy > } > } > > RI prints: > Windows XP > null > > Harmony prints: > Windows XP > K0319java.security.AccessControlException: Access denied (java.util.PropertyPermission notexist read) > at java.security.AccessController.checkPermission(AccessController.java:94) > at java.lang.SecurityManager.checkPermission(SecurityManager.java:739) > at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:374) > at java.lang.System.getProperty(System.java:675) > at java.lang.System.getProperty(System.java:660) > at SecurityManagerTest.main(Unknown Source) > > I got same results if add the content customized java.policy to default policy file without specifying policy file in cmd line. > > [1] > grant codeBase "file:${test.bin.dir}/-" { > permission java.security.AllPermission; > }; > > > -- Paulex Yang China Software Development Lab IBM
-- Best regards, Boris Kuznetsov Intel Middleware Products Division