RE: demo site - security problem
"Bordet, Simone" <[email protected]>
| Newsgroups | gmane.comp.java.mx4j.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi Blaine,
> I have a publicly accessible prototype running at
> http://admc.com:8111. You can instantiate and play with the
> following MBean classes:
>
> tst.SampleStd
> tst.SampleADM
> tst.DelegatedADM
> tst.SampleWrapper
>
> This prototype consists of my own HTML-over-HTTP adaptor in
> standalone mode, running under a security manager.
>
> Below is my security policy file.
>
> grant codebase "file:/usr/local/mx4j/lib/mx4j.jar" {
> //permission java.security.AllPermission;
> permission java.util.PropertyPermission "*", "read";
> permission javax.management.MBeanServerPermission
> "createMBeanServer";
> permission javax.management.MBeanPermission "*", "*";
> permission java.lang.RuntimePermission "getProtectionDomain";
> permission javax.management.MBeanTrustPermission "register";
> //permission javax.security.auth.AuthPermission
> "doAsPrivileged"; };
>
> grant codebase "file:dist/admcjmx-adaptors.jar" {
> permission javax.management.MBeanServerPermission
> "createMBeanServer";
> permission javax.management.MBeanPermission "*", "*";
I've been able to stop() the MBeanServerInterceptorConfigurator, which results in the MBeanServer to stop working.
The problem may be this permission above ?
A note on the browser, I'm using Firebird 0.7 and there is no "hand" cursor on the links, I'm wondering if it's a stylesheet issue or a browser one.
Great job !
Simon
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click