File: FilePublisherPermsTest3.policy

package info (click to toggle)
openjdk-21 21.0.8%2B9-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 823,976 kB
  • sloc: java: 5,613,338; xml: 1,643,607; cpp: 1,296,296; ansic: 420,291; asm: 404,850; objc: 20,994; sh: 15,271; javascript: 11,245; python: 6,895; makefile: 2,362; perl: 357; awk: 351; sed: 172; jsp: 24; csh: 3
file content (95 lines) | stat: -rw-r--r-- 4,974 bytes parent folder | download | duplicates (7)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
//
// Copyright (c) 2020, 2023, Oracle and/or its affiliates. All rights reserved.
// DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
//
// This code is free software; you can redistribute it and/or modify it
// under the terms of the GNU General Public License version 2 only, as
// published by the Free Software Foundation.
//
// This code is distributed in the hope that it will be useful, but WITHOUT
// ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
// FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
// version 2 for more details (a copy is included in the LICENSE file that
// accompanied this code).
//
// You should have received a copy of the GNU General Public License version
// 2 along with this work; if not, write to the Free Software Foundation,
// Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
//
// Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
// or visit www.oracle.com if you need additional information or have any
// questions.
//

// same as FilePublisherPermsTest1.policy with additional custom permission
// for test classes and HttpClient (in java.net.http)

grant codeBase "jrt:/java.net.http" {
    permission java.lang.RuntimePermission "customPermission";
};

// for JTwork/classes/0/test/lib/jdk/test/lib/net/SimpleSSLContext.class
grant codeBase "file:${test.classes}/../../../../../test/lib/-" {
    permission java.util.PropertyPermission "test.src.path", "read";
    permission java.io.FilePermission "${test.src}/../../../../../lib/jdk/test/lib/net/testkeys", "read";
};

// for jdk/httpclient/test/lib/* classes
grant codeBase "file:${test.classes}/../../../../../test/jdk/java/net/httpclient/lib/-" {
    permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.net.http.common";
    permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.net.http.frame";
    permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.net.http.hpack";
    permission java.lang.RuntimePermission "accessClassInPackage.sun.net.www.http";

    permission java.net.SocketPermission "127.0.0.1:*", "accept,resolve";
    permission java.net.SocketPermission "[::1]:*", "accept,resolve";
    permission java.lang.RuntimePermission "modifyThread";
};

grant codeBase "file:${test.classes}/*" {
    permission java.net.URLPermission "http://127.0.0.1:*/http1/echo", "POST";
    permission java.net.URLPermission "https://127.0.0.1:*/https1/echo", "POST";
    permission java.net.URLPermission "http://127.0.0.1:*/http2/echo", "POST";
    permission java.net.URLPermission "https://127.0.0.1:*/https2/echo", "POST";
    permission java.net.URLPermission "https://127.0.0.1:*/http1/echo", "GET";
    permission java.net.URLPermission "https://127.0.0.1:*/https1/echo", "GET";
    permission java.net.URLPermission "http://127.0.0.1:*/http2/echo", "GET";
    permission java.net.URLPermission "https://127.0.0.1:*/https2/echo", "GET";
    // ipv6
    permission java.net.URLPermission "http://[::1]:*/http1/echo", "POST";
    permission java.net.URLPermission "https://[::1]:*/https1/echo", "POST";
    permission java.net.URLPermission "http://[::1]:*/http2/echo", "POST";
    permission java.net.URLPermission "https://[::1]:*/https2/echo", "POST";
    permission java.net.URLPermission "https://[::1]:*/http1/echo", "GET";
    permission java.net.URLPermission "https://[::1]:*/https1/echo", "GET";
    permission java.net.URLPermission "http://[::1]:*/http2/echo", "GET";
    permission java.net.URLPermission "https://[::1]:*/https2/echo", "GET";

    // file permissions
    permission java.io.FilePermission "${user.dir}${/}defaultFile.txt", "read,write,delete";
    permission java.io.FilePermission "${user.dir}${/}file.zip", "read,write,delete";
    permission java.lang.RuntimePermission "customPermission";

    // needed to access FileSystemProvider
    permission java.lang.RuntimePermission "fileSystemProvider";

    // for permission changes
    permission java.security.SecurityPermission "getPolicy";
    permission java.security.SecurityPermission "setPolicy";

    // needed to grant permission to the HTTP/2 server
    permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.net.http.common";
    permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.net.http.frame";
    permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.net.http.hpack";
    permission java.lang.RuntimePermission "accessClassInPackage.sun.net.www.http";

    // for HTTP/1.1 server logging
    permission java.util.logging.LoggingPermission "control";

    // needed to grant the HTTP servers
    permission java.net.SocketPermission "127.0.0.1:*", "accept,resolve";
    permission java.net.SocketPermission "[::1]:*", "accept,resolve";

    permission java.util.PropertyPermission "*", "read";
    permission java.lang.RuntimePermission "modifyThread";
};