Re: demo site - security problem
Blaine Simpson <[email protected]>
| Newsgroups | gmane.comp.java.mx4j.devel |
|---|---|
| Message-ID | <[email protected]> |
Bordet, Simone wrote:
> Hi Blaine,
>
>
>>I have a publicly accessible prototype running at
>>http://admc.com:8111. You can instantiate and play with the
>>following MBean classes:
>>
>> tst.SampleStd
>> tst.SampleADM
>> tst.DelegatedADM
>> tst.SampleWrapper
>>
>>This prototype consists of my own HTML-over-HTTP adaptor in
>>standalone mode, running under a security manager.
>>
>>Below is my security policy file.
>>
>>grant codebase "file:/usr/local/mx4j/lib/mx4j.jar" {
>> //permission java.security.AllPermission;
>> permission java.util.PropertyPermission "*", "read";
>> permission javax.management.MBeanServerPermission
>>"createMBeanServer";
>> permission javax.management.MBeanPermission "*", "*";
>> permission java.lang.RuntimePermission "getProtectionDomain";
>> permission javax.management.MBeanTrustPermission "register";
>> //permission javax.security.auth.AuthPermission
>>"doAsPrivileged"; };
>>
>>grant codebase "file:dist/admcjmx-adaptors.jar" {
>> permission javax.management.MBeanServerPermission
>>"createMBeanServer";
>> permission javax.management.MBeanPermission "*", "*";
>
>
> I've been able to stop() the MBeanServerInterceptorConfigurator, which results in the MBeanServer to stop working.
> The problem may be this permission above ?
Which permission above? The MBeanPermission? Maybe I need to tighten
down that MBeanPermission only to the MBeans and methods needed to start
up the Agent?
> A note on the browser, I'm using Firebird 0.7 and there is no "hand" cursor on the links, I'm wondering if it's a stylesheet issue or a browser one.
Known problem. I'm using a Java onclick event. Anybody out there know how I
can get this to emulate the hover behavior of HTML hyperlink, but without
clobbering browser history with a self href link?
> Great job !
>
> Simon
--
Don't pray in my school, and I won't think in your church.
ICF: 703-934-3692 Cell: 703-944-9317
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click