Search in sources :

Example 16 with SecurityPermission

use of java.security.SecurityPermission in project jdk8u_jdk by JetBrains.

the class TestPolicy method setMinimalPermissions.

/*
     * Defines the minimal permissions required by testNG when running these
     * tests
     */
private void setMinimalPermissions() {
    permissions.add(new SecurityPermission("getPolicy"));
    permissions.add(new SecurityPermission("setPolicy"));
    permissions.add(new RuntimePermission("getClassLoader"));
    permissions.add(new RuntimePermission("setSecurityManager"));
    permissions.add(new RuntimePermission("createSecurityManager"));
    permissions.add(new PropertyPermission("testng.show.stack.frames", "read"));
    permissions.add(new PropertyPermission("line.separator", "read"));
    permissions.add(new PropertyPermission("fileStringBuffer", "read"));
    permissions.add(new PropertyPermission("dataproviderthreadcount", "read"));
    permissions.add(new PropertyPermission("java.io.tmpdir", "read"));
    permissions.add(new FilePermission("<<ALL FILES>>", "read, write, delete"));
}
Also used : PropertyPermission(java.util.PropertyPermission) FilePermission(java.io.FilePermission) SecurityPermission(java.security.SecurityPermission)

Example 17 with SecurityPermission

use of java.security.SecurityPermission in project streamsupport by stefan-zobel.

the class JSR166TestCase method runWithSecurityManagerWithPermissions.

/**
 * Runs Runnable r with a security policy that permits precisely
 * the specified permissions.  If there is no current security
 * manager, a temporary one is set for the duration of the
 * Runnable.  We require that any security manager permit
 * getPolicy/setPolicy.
 */
public void runWithSecurityManagerWithPermissions(Runnable r, Permission... permissions) {
    SecurityManager sm = System.getSecurityManager();
    if (sm == null) {
        Policy savedPolicy = Policy.getPolicy();
        try {
            Policy.setPolicy(permissivePolicy());
            System.setSecurityManager(new SecurityManager());
            runWithSecurityManagerWithPermissions(r, permissions);
        } finally {
            System.setSecurityManager(null);
            Policy.setPolicy(savedPolicy);
        }
    } else {
        Policy savedPolicy = Policy.getPolicy();
        AdjustablePolicy policy = new AdjustablePolicy(permissions);
        Policy.setPolicy(policy);
        try {
            r.run();
        } finally {
            policy.addPermission(new SecurityPermission("setPolicy"));
            Policy.setPolicy(savedPolicy);
        }
    }
}
Also used : Policy(java.security.Policy) SecurityPermission(java.security.SecurityPermission)

Example 18 with SecurityPermission

use of java.security.SecurityPermission in project wildfly by wildfly.

the class SecuredBeanClientInterceptorTestCase method deployment1.

@Deployment(name = "client")
@TargetsContainer("multinode-client")
public static Archive<?> deployment1() {
    final Package currentPackage = SecuredBeanClientInterceptorTestCase.class.getPackage();
    WebArchive war = ShrinkWrap.create(WebArchive.class, ARCHIVE_NAME_CLIENT + ".war");
    war.addClasses(Util.class, ClientInterceptorUtil.class);
    war.addClasses(AbstractSecurityDomainSetup.class, EjbSecurityDomainSetup.class);
    war.addClasses(SecuredBeanClientInterceptorTestCase.class, SampleSecureInterceptor.class, Secured.class, SecuredBean.class);
    war.addPackage(AbstractClientInterceptorsSetupTask.class.getPackage());
    war.addAsManifestResource("META-INF/jboss-ejb-client-receivers.xml", "jboss-ejb-client.xml");
    war.addAsWebInfResource(currentPackage, "jboss-web.xml", "jboss-web.xml");
    war.addAsManifestResource(new StringAsset("Manifest-Version: 1.0\nDependencies: org.jboss.as.controller-client,org.jboss.dmr\n"), "MANIFEST.MF");
    war.addAsManifestResource(createPermissionsXmlAsset(new SecurityPermission("putProviderProperty.WildFlyElytron"), new ElytronPermission("getSecurityDomain"), new ElytronPermission("authenticate"), new RuntimePermission("getProtectionDomain"), new AuthPermission("modifyPrincipals"), new FilePermission(System.getProperty("jboss.home") + File.separatorChar + "standalone" + File.separatorChar + "tmp" + File.separatorChar + "auth" + File.separatorChar + "-", "read")), "permissions.xml");
    return war;
}
Also used : AbstractClientInterceptorsSetupTask(org.jboss.as.test.shared.integration.interceptor.clientside.AbstractClientInterceptorsSetupTask) StringAsset(org.jboss.shrinkwrap.api.asset.StringAsset) AuthPermission(javax.security.auth.AuthPermission) WebArchive(org.jboss.shrinkwrap.api.spec.WebArchive) ElytronPermission(org.wildfly.security.permission.ElytronPermission) FilePermission(java.io.FilePermission) SecurityPermission(java.security.SecurityPermission) OperateOnDeployment(org.jboss.arquillian.container.test.api.OperateOnDeployment) Deployment(org.jboss.arquillian.container.test.api.Deployment) TargetsContainer(org.jboss.arquillian.container.test.api.TargetsContainer)

Example 19 with SecurityPermission

use of java.security.SecurityPermission in project wildfly by wildfly.

the class StopFromDifferentNodeTestCase method createDeployment.

private static Archive<?> createDeployment() {
    final WebArchive war = ShrinkWrap.create(WebArchive.class, ARCHIVE_NAME + ".war");
    war.addClasses(Batchlet1.class, BatchClientIF.class, BatchClientBean.class);
    war.addAsWebInfResource(EmptyAsset.INSTANCE, "beans.xml");
    war.addAsWebInfResource(StopFromDifferentNodeTestCase.class.getPackage(), BATCHLET1_JOB, "classes/META-INF/batch-jobs/" + BATCHLET1_JOB);
    war.addAsManifestResource(createPermissionsXmlAsset(new SocketPermission("*:9092", "connect,resolve"), new SecurityPermission("putProviderProperty.WildFlyElytron")), "permissions.xml");
    return war;
}
Also used : WebArchive(org.jboss.shrinkwrap.api.spec.WebArchive) SocketPermission(java.net.SocketPermission) SecurityPermission(java.security.SecurityPermission)

Example 20 with SecurityPermission

use of java.security.SecurityPermission in project wildfly by wildfly.

the class RemoteProtocolChangeClientInterceptorTestCase method deployment1.

@Deployment(name = AbstractClientInterceptorsSetupTask.DEPLOYMENT_NAME_CLIENT)
@TargetsContainer(AbstractClientInterceptorsSetupTask.TARGER_CONTAINER_CLIENT)
public static Archive<?> deployment1() {
    JavaArchive jar = ShrinkWrap.create(JavaArchive.class, ARCHIVE_NAME_CLIENT + ".jar");
    jar.addClasses(Util.class, ClientInterceptorUtil.class);
    jar.addClasses(StatelessBean.class, StatelessRemote.class, ProtocolSampleClientInterceptor.class);
    jar.addClasses(RemoteProtocolChangeClientInterceptorTestCase.class, TestSuiteEnvironment.class);
    jar.addPackage(AbstractClientInterceptorsSetupTask.class.getPackage());
    jar.addAsManifestResource(RemoteProtocolChangeClientInterceptorTestCase.class.getPackage(), "jboss-ejb-client.xml", "jboss-ejb-client.xml");
    jar.addAsManifestResource(createPermissionsXmlAsset(new SecurityPermission("putProviderProperty.WildFlyElytron"), new PropertyPermission("management.address", "read"), new PropertyPermission("node0", "read"), new PropertyPermission("jboss.http.port", "read"), new PropertyPermission("jboss.socket.binding.port-offset", "read"), new FilePermission(System.getProperty("jboss.home") + File.separatorChar + "standalone" + File.separatorChar + "tmp" + File.separatorChar + "auth" + File.separatorChar + "-", "read")), "permissions.xml");
    return jar;
}
Also used : AbstractClientInterceptorsSetupTask(org.jboss.as.test.shared.integration.interceptor.clientside.AbstractClientInterceptorsSetupTask) PropertyPermission(java.util.PropertyPermission) FilePermission(java.io.FilePermission) JavaArchive(org.jboss.shrinkwrap.api.spec.JavaArchive) SecurityPermission(java.security.SecurityPermission) OperateOnDeployment(org.jboss.arquillian.container.test.api.OperateOnDeployment) Deployment(org.jboss.arquillian.container.test.api.Deployment) TargetsContainer(org.jboss.arquillian.container.test.api.TargetsContainer)

Aggregations

SecurityPermission (java.security.SecurityPermission)27 FilePermission (java.io.FilePermission)8 Deployment (org.jboss.arquillian.container.test.api.Deployment)8 WebArchive (org.jboss.shrinkwrap.api.spec.WebArchive)7 Policy (java.security.Policy)6 JavaArchive (org.jboss.shrinkwrap.api.spec.JavaArchive)6 PropertyPermission (java.util.PropertyPermission)5 OperateOnDeployment (org.jboss.arquillian.container.test.api.OperateOnDeployment)5 TargetsContainer (org.jboss.arquillian.container.test.api.TargetsContainer)5 SocketPermission (java.net.SocketPermission)4 AbstractClientInterceptorsSetupTask (org.jboss.as.test.shared.integration.interceptor.clientside.AbstractClientInterceptorsSetupTask)4 ReflectPermission (java.lang.reflect.ReflectPermission)3 Permission (java.security.Permission)3 PermissionCollection (java.security.PermissionCollection)3 Permissions (java.security.Permissions)3 StringAsset (org.jboss.shrinkwrap.api.asset.StringAsset)3 CodeSource (java.security.CodeSource)2 PrivilegedActionException (java.security.PrivilegedActionException)2 Expectations (mockit.Expectations)2 EnterpriseArchive (org.jboss.shrinkwrap.api.spec.EnterpriseArchive)2