2 // This system policy file grants a set of default permissions to all domains
3 // and can be configured to grant additional permissions to modules and other
4 // code sources. The code source URL scheme for modules linked into a
5 // run-time image is "jrt".
7 // For example, to grant permission to read the "foo" property to the module
8 // "com.greetings", the grant entry is:
10 // grant codeBase "jrt:/com.greetings" {
11 // permission java.util.PropertyPermission "foo", "read";
15 // default permissions granted to all domains
17 // allows anyone to listen on dynamic ports
18 permission java.net.SocketPermission "localhost:0", "listen";
20 // "standard" properies that can be read by anyone
21 permission java.util.PropertyPermission "java.version", "read";
22 permission java.util.PropertyPermission "java.vendor", "read";
23 permission java.util.PropertyPermission "java.vendor.url", "read";
24 permission java.util.PropertyPermission "java.class.version", "read";
25 permission java.util.PropertyPermission "os.name", "read";
26 permission java.util.PropertyPermission "os.version", "read";
27 permission java.util.PropertyPermission "os.arch", "read";
28 permission java.util.PropertyPermission "file.separator", "read";
29 permission java.util.PropertyPermission "path.separator", "read";
30 permission java.util.PropertyPermission "line.separator", "read";
31 permission java.util.PropertyPermission
32 "java.specification.version", "read";
33 permission java.util.PropertyPermission "java.specification.vendor", "read";
34 permission java.util.PropertyPermission "java.specification.name", "read";
35 permission java.util.PropertyPermission
36 "java.vm.specification.version", "read";
37 permission java.util.PropertyPermission
38 "java.vm.specification.vendor", "read";
39 permission java.util.PropertyPermission
40 "java.vm.specification.name", "read";
41 permission java.util.PropertyPermission "java.vm.version", "read";
42 permission java.util.PropertyPermission "java.vm.vendor", "read";
43 permission java.util.PropertyPermission "java.vm.name", "read";