Re: [equinox-dev] Equinox with OSGi security?
Hello Thomas,
Thanks a lot, now it works!
Greetings, Marcel
On Jan 24, 2008, at 19:09 , Thomas Watson wrote:
The eclipse.security is only used by the
org.eclipse.equinox.launcher jar. The eclipse.security option is
used by the launcher bootstrap code to indicate that it should setup
a policy which grants itself and the framework ALLPermissions. Then
it sets the java.security.manager to the value of eclipse.security.
Later when the Framework launches it actually will install the
SecurityManager to enable security.
When running without the launcher you need to do a bit more work to
setup your policy file. You can use a very simple policy which
grants AllPermissions to everything like this ...
## BEGIN POLICY FILE ##
grant {
permission java.security.AllPermission;
};
## END POLICY FILE ##
You would then launch equinox with the following command:
java -
Djava
.security
.manager
=org.eclipse.osgi.framework.internal.core.FrameworkSecurityManager -
Djava.security.policy=policy -jar
org.eclipse.osgi_3.4.0.v20080107.jar -console
The java.security.manager property tells the VM what security
manager to load. The java.security.policy property tells the VM what
policy to load to grant permissions. Note that the permissions
granted to the bundles installed into the framework are controled by
the PermissionAdmin and ConditionalPermissionAdmin services. By
default these services will grant all bundles AllPermissions.
___
equinox-dev mailing list
equinox-dev@eclipse.org
https://dev.eclipse.org/mailman/listinfo/equinox-dev
Re: [equinox-dev] Equinox with OSGi security?
The eclipse.security is only used by the org.eclipse.equinox.launcher jar.
The eclipse.security option is used by the launcher bootstrap code to
indicate that it should setup a policy which grants itself and the
framework ALLPermissions. Then it sets the java.security.manager to the
value of eclipse.security. Later when the Framework launches it actually
will install the SecurityManager to enable security.
When running without the launcher you need to do a bit more work to setup
your policy file. You can use a very simple policy which grants
AllPermissions to everything like this ...
## BEGIN POLICY FILE ##
grant {
permission java.security.AllPermission;
};
## END POLICY FILE ##
You would then launch equinox with the following command:
java
-Djava.security.manager=org.eclipse.osgi.framework.internal.core.FrameworkSecurityManager
-Djava.security.policy=policy -jar org.eclipse.osgi_3.4.0.v20080107.jar
-console
The java.security.manager property tells the VM what security manager to
load. The java.security.policy property tells the VM what policy to load
to grant permissions. Note that the permissions granted to the bundles
installed into the framework are controled by the PermissionAdmin and
ConditionalPermissionAdmin services. By default these services will grant
all bundles AllPermissions.
HTH.
Tom
From: Marcel Offermans <[EMAIL PROTECTED]>
To: Equinox development mailing list
Date: 01/24/2008 10:42 AM
Subject:[equinox-dev] Equinox with OSGi security?
I would like to run Equinox with OSGi security (PermissionAdmin,
ConditionalPermissionAdmin) enabled.
I read the quickstart guide here:
http://www.eclipse.org/equinox/documents/quickstart.php
I even found some reference to a property to set that should enable
security:
-
Declipse
.security
=org.eclipse.osgi.framework.internal.core.FrameworkSecurityManager
However, if I just run the Equinox framework like described in the
quickstart guide with that property, I still do not get any security
related service. Am I missing some piece of documentation here? It
should not be too hard to run with security, right?
Greetings, Marcel
___
equinox-dev mailing list
equinox-dev@eclipse.org
https://dev.eclipse.org/mailman/listinfo/equinox-dev
<><>___
equinox-dev mailing list
equinox-dev@eclipse.org
https://dev.eclipse.org/mailman/listinfo/equinox-dev
[equinox-dev] Equinox with OSGi security?
I would like to run Equinox with OSGi security (PermissionAdmin, ConditionalPermissionAdmin) enabled. I read the quickstart guide here: http://www.eclipse.org/equinox/documents/quickstart.php I even found some reference to a property to set that should enable security: - Declipse .security =org.eclipse.osgi.framework.internal.core.FrameworkSecurityManager However, if I just run the Equinox framework like described in the quickstart guide with that property, I still do not get any security related service. Am I missing some piece of documentation here? It should not be too hard to run with security, right? Greetings, Marcel ___ equinox-dev mailing list equinox-dev@eclipse.org https://dev.eclipse.org/mailman/listinfo/equinox-dev
