Java Policy

最新推荐文章于 2023-06-27 23:30:00 发布

转载最新推荐文章于 2023-06-27 23:30:00 发布 · 98 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：http://www.cnblogs.com/Piers/p/6549595.html

文章标签：

#java #数据库

本文介绍了Java编程语言应用环境中的安全策略实现方式，通过Policy对象及其子类来控制来自不同源的代码权限。文章还提供了具体的Policy文件配置示例。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

# What

The policy for a Java™ programming language application environment (specifying which permissions are available for code from various sources, and executing as various principals) is represented by a Policy object. More specifically, it is represented by a Policy subclass providing an implementation of the abstract methods in the Policy class (which is in the java.security package).

Java™ 编程语言应用环境的安全策略是以一个 Policy 对象表示的。具体来说，它表示一个 Policy 的子类，该子类提供了类 Policy（在 java.security 包中）的抽象方法的实现。

# Why

Policy 定义了很多 Permission，包括文件读取、网络等。只需要一个文件，就可以相对简单有效的控制 Java 程序的安全。

# How

Example：

// If the code is signed by "Duke", grant it read/write access to all 
// files in /tmp:
grant signedBy "Duke" {
    permission java.io.FilePermission "/tmp/*", "read,write";
};

// Grant everyone the following permission:
grant { 
    permission java.util.PropertyPermission "java.vendor", "read";
};

# Reference

http://docs.oracle.com/javase/8/docs/technotes/guides/security/PolicyFiles.html

转载于:https://www.cnblogs.com/Piers/p/6549595.html