| Frames | No Frames |
1: /* RuntimePermission.java -- permission for a secure runtime action 2: Copyright (C) 1998, 2000, 2002, 2005 Free Software Foundation, Inc. 3: 4: This file is part of GNU Classpath. 5: 6: GNU Classpath is free software; you can redistribute it and/or modify 7: it under the terms of the GNU General Public License as published by 8: the Free Software Foundation; either version 2, or (at your option) 9: any later version. 10: 11: GNU Classpath is distributed in the hope that it will be useful, but 12: WITHOUT ANY WARRANTY; without even the implied warranty of 13: MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 14: General Public License for more details. 15: 16: You should have received a copy of the GNU General Public License 17: along with GNU Classpath; see the file COPYING. If not, write to the 18: Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 19: 02110-1301 USA. 20: 21: Linking this library statically or dynamically with other modules is 22: making a combined work based on this library. Thus, the terms and 23: conditions of the GNU General Public License cover the whole 24: combination. 25: 26: As a special exception, the copyright holders of this library give you 27: permission to link this library with independent modules to produce an 28: executable, regardless of the license terms of these independent 29: modules, and to copy and distribute the resulting executable under 30: terms of your choice, provided that you also meet, for each linked 31: independent module, the terms and conditions of the license of that 32: module. An independent module is a module which is not derived from 33: or based on this library. If you modify this library, you may extend 34: this exception to your version of the library, but you are not 35: obligated to do so. If you do not wish to do so, delete this 36: exception statement from your version. */ 37: 38: 39: package java.lang; 40: 41: import java.security.BasicPermission; 42: import java.security.Permission; 43: 44: /** 45: * A <code>RuntimePermission</code> contains a permission name, but no 46: * actions list. This means you either have the permission or you don't. 47: * 48: * Permission names have the follow the hierarchial property naming 49: * convention. In addition, an asterisk may appear at the end of a 50: * name if following a period or by itself. 51: * 52: * <table border=1> 53: * <tr><th>Valid names</th><th>Invalid names</th></tr> 54: * <tr><td>"accessClassInPackage.*","*"</td> 55: * <td>"**", "*x", "*.a"</td></tr> 56: * </table> 57: * <br> 58: * 59: * The following table provides a list of all the possible RuntimePermission 60: * permission names with a description of what that permission allows.<br> 61: * <table border=1> 62: * <tr><th>Permission Name</th><th>Permission Allows</th><th>Risks</th</tr> 63: * <tr> 64: * <td><code>createClassLoader</code></td> 65: * <td>creation of a class loader</td> 66: * <td>a class loader can load rogue classes which bypass all security 67: * permissions</td></tr> 68: * <tr> 69: * <td><code>getClassLoader</code></td> 70: * <td>retrieval of the class loader for the calling class</td> 71: * <td>rogue code could load classes not otherwise available</td></tr> 72: * <tr> 73: * <td><code>setContextClassLoader</code></td> 74: * <td>allows the setting of the context class loader used by a thread</td> 75: * <td>rogue code could change the context class loader needed by system 76: * threads</td></tr> 77: * <tr> 78: * <td><code>setSecurityManager</code></td> 79: * <td>allows the application to replace the security manager</td> 80: * <td>the new manager may be less restrictive, so that rogue code can 81: * bypass existing security checks</td></tr> 82: * <tr> 83: * <td><code>createSecurityManager</code></td> 84: * <td>allows the application to create a new security manager</td> 85: * <td>rogue code can use the new security manager to discover information 86: * about the execution stack</td></tr> 87: * <tr> 88: * <td><code>exitVM</code></td> 89: * <td>allows the application to halt the virtual machine</td> 90: * <td>rogue code can mount a denial-of-service attack by killing the 91: * virtual machine</td></tr> 92: * <tr> 93: * <td><code>shutdownHooks</code></td> 94: * <td>allows registration and modification of shutdown hooks</td> 95: * <td>rogue code can add a hook that interferes with clean 96: * virtual machine shutdown</td></tr> 97: * <tr> 98: * <td><code>setFactory</code></td> 99: * <td>allows the application to set the socket factory for socket, 100: * server socket, stream handler, or RMI socket factory.</td> 101: * <td>rogue code can create a rogue network object which mangles or 102: * intercepts data</td></tr> 103: * <tr> 104: * <td><code>setIO</code></td> 105: * <td>allows the application to set System.out, System.in, and 106: * System.err</td> 107: * <td>rogue code could sniff user input and intercept or mangle 108: * output</td></tr> 109: * <tr> 110: * <td><code>modifyThread</code></td> 111: * <td>allows the application to modify any thread in the virtual machine 112: * using any of the methods <code>stop</code>, <code>resume</code>, 113: * <code>suspend</code>, <code>setPriority</code>, and 114: * <code>setName</code> of classs <code>Thread</code></td> 115: * <td>rogue code could adversely modify system or user threads</td></tr> 116: * <tr> 117: * <td><code>stopThread</code></td> 118: * <td>allows the application to <code>stop</code> any thread it has 119: * access to in the system</td> 120: * <td>rogue code can stop arbitrary threads</td></tr> 121: * <tr> 122: * <td><code>modifyThreadGroup</code></td> 123: * <td>allows the application to modify thread groups using any of the 124: * methods <code>destroy</code>, <code>resume</code>, 125: * <code>setDaemon</code>, <code>setMaxPriority</code>, 126: * <code>stop</code>, and <code>suspend</code> of the class 127: * <code>ThreadGroup</code></td> 128: * <td>rogue code can mount a denial-of-service attack by changing run 129: * priorities</td></tr> 130: * <tr> 131: * <td><code>getProtectionDomain</code></td> 132: * <td>retrieve a class's ProtectionDomain</td> 133: * <td>rogue code can gain information about the security policy, to 134: * prepare a better attack</td></tr> 135: * <tr> 136: * <td><code>readFileDescriptor</code></td> 137: * <td>read a file descriptor</td> 138: * <td>rogue code can read sensitive information</td></tr> 139: * <tr> 140: * <td><code>writeFileDescriptor</code></td> 141: * <td>write a file descriptor</td> 142: * <td>rogue code can write files, including viruses, and can modify the 143: * virtual machine binary; if not just fill up the disk</td></tr> 144: * <tr> 145: * <td><code>loadLibrary.</code><em>library name</em></td> 146: * <td>dynamic linking of the named library</td> 147: * <td>native code can bypass many security checks of pure Java</td></tr> 148: * <tr> 149: * <td><code>accessClassInPackage.</code><em>package name</em></td> 150: * <td>access to a package via a ClassLoader</td> 151: * <td>rogue code can access classes not normally available</td></tr> 152: * <tr> 153: * <td><code>defineClassInPackage.</code><em>package name</em></td> 154: * <td>define a class inside a given package</td> 155: * <td>rogue code can install rogue classes, including in trusted packages 156: * like java.security or java.lang</td></tr> 157: * <tr> 158: * <td><code>accessDeclaredMembers</code></td> 159: * <td>access declared class members via reflection</td> 160: * <td>rogue code can discover information, invoke methods, or modify fields 161: * that are not otherwise available</td></tr> 162: * <tr> 163: * <td><code>queuePrintJob</code></td> 164: * <td>initiate a print job</td> 165: * <td>rogue code could make a hard copy of sensitive information, or 166: * simply waste paper</td></tr> 167: * </table> 168: * 169: * @author Brian Jones 170: * @author Eric Blake (ebb9@email.byu.edu) 171: * @see BasicPermission 172: * @see Permission 173: * @see SecurityManager 174: * @since 1.2 175: * @status updated to 1.4 176: */ 177: public final class RuntimePermission extends BasicPermission 178: { 179: /** 180: * Compatible with JDK 1.2+. 181: */ 182: private static final long serialVersionUID = 7399184964622342223L; 183: 184: /** 185: * Create a new permission with the specified name. 186: * 187: * @param permissionName the name of the granted permission 188: * @throws NullPointerException if name is null 189: * @throws IllegalArgumentException thrown if name is empty or invalid 190: */ 191: public RuntimePermission(String permissionName) 192: { 193: super(permissionName); 194: } 195: 196: /** 197: * Create a new permission with the specified name. The actions argument 198: * is ignored, as runtime permissions have no actions. 199: * 200: * @param permissionName the name of the granted permission 201: * @param actions ignored 202: * @throws NullPointerException if name is null 203: * @throws IllegalArgumentException thrown if name is empty or invalid 204: */ 205: public RuntimePermission(String permissionName, String actions) 206: { 207: super(permissionName); 208: } 209: }