tomcat server安全策略

最新推荐文章于 2024-03-08 21:51:01 发布

原创最新推荐文章于 2024-03-08 21:51:01 发布 · 1k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#tomcat #server #hibernate #permissions #apache #file

web 专栏收录该内容

56 篇文章

订阅专栏

本文介绍了一种为应用服务器配置权限的方法，通过定义详细的权限策略确保Hibernate框架可以正常读写配置文件，并允许Apache Axis运行所需的权限。

将以下内容拷贝到appserver
*****************************************************
grant {
// Permission for allowing Hibernate read/write from it's configuration files.
permission java.util.PropertyPermission "*", "read,write";

   // Permission for cglib part of Hibernate framework
   permission java.lang.RuntimePermission "getProtectionDomain";
   permission java.lang.reflect.ReflectPermission "suppressAccessChecks";

   // Permissions to get Apache Axis to work
   permission java.lang.RuntimePermission "createClassLoader";
   permission java.lang.RuntimePermission "getClassLoader";
};

grant codeBase "file:${com.sun.aas.installRoot}/domains/domain1/applications/j2ee-modules/-" {
permission java.security.AllPermission;
};

grant {
permission java.security.AllPermission;
};

grant {
permission java.io.FilePermission "<<ALL FILES>>", "read,write,execute";
};