changeset 41356:4bd1181b2fea

8166632: Document how to grant permissions for a module jrt:/<module> in the image Reviewed-by: alanb, mchung
author mullan
date Wed, 05 Oct 2016 12:36:01 -0400
parents 910288d26d83
children a2d4b8d2115a
files jdk/src/java.base/share/conf/security/java.policy
diffstat 1 files changed, 14 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/jdk/src/java.base/share/conf/security/java.policy	Wed Oct 05 10:49:49 2016 +0200
+++ b/jdk/src/java.base/share/conf/security/java.policy	Wed Oct 05 12:36:01 2016 -0400
@@ -1,5 +1,18 @@
+//
+// This system policy file grants a set of default permissions to all domains
+// and can be configured to grant additional permissions to modules and other
+// code sources. The code source URL scheme for modules linked into a
+// run-time image is "jrt".
+//
+// For example, to grant permission to read the "foo" property to the module
+// "com.greetings", the grant entry is:
+//
+// grant codeBase "jrt:/com.greetings" {
+//     permission java.util.PropertyPermission "foo", "read";
+// };
+//
+
 // default permissions granted to all domains
-
 grant {
     // allows anyone to listen on dynamic ports
     permission java.net.SocketPermission "localhost:0", "listen";