RE: demo site - security problem

"Bordet, Simone" <[email protected]>
Newsgroups gmane.comp.java.mx4j.devel
Message-ID <[email protected]>
Hi Blaine,

> I have a publicly accessible prototype running at 
> http://admc.com:8111.  You can instantiate and play with the 
> following MBean classes:
> 
>      tst.SampleStd
>      tst.SampleADM
>      tst.DelegatedADM
>      tst.SampleWrapper
> 
> This prototype consists of my own HTML-over-HTTP adaptor in 
> standalone mode, running under a security manager.
> 
> Below is my security policy file.
> 
> grant codebase "file:/usr/local/mx4j/lib/mx4j.jar" {
>      //permission java.security.AllPermission;
>      permission java.util.PropertyPermission "*", "read";
>      permission javax.management.MBeanServerPermission 
> "createMBeanServer";
>      permission javax.management.MBeanPermission "*", "*";
>      permission java.lang.RuntimePermission "getProtectionDomain";
>      permission javax.management.MBeanTrustPermission "register";
>      //permission javax.security.auth.AuthPermission 
> "doAsPrivileged"; };
> 
> grant codebase "file:dist/admcjmx-adaptors.jar" {
>      permission javax.management.MBeanServerPermission 
> "createMBeanServer";
>      permission javax.management.MBeanPermission "*", "*";

I've been able to stop() the MBeanServerInterceptorConfigurator, which results in the MBeanServer to stop working.
The problem may be this permission above ?

A note on the browser, I'm using Firebird 0.7 and there is no "hand" cursor on the links, I'm wondering if it's a stylesheet issue or a browser one.

Great job !

Simon


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.