Author: gtrasuk
Date: Fri May  4 10:31:29 2012
New Revision: 1333864

URL: http://svn.apache.org/viewvc?rev=1333864&view=rev
Log:
Ongoing work on starter service deployer.
Fixed bug in resource lookup in VirtualFileSystemClassLoader (actually in 
ClasspathFilterBuilder).
Security system working.  Figured out the right permissions to host Reggie.
Codebase server is not reporting the correct IP address.

Modified:
    
river/jtsk/skunk/surrogate/src/org/apache/river/container/deployer/ClasspathFilterBuilder.java
    
river/jtsk/skunk/surrogate/testfiles/testroot/profile/default/service-starter.cfg

Modified: 
river/jtsk/skunk/surrogate/src/org/apache/river/container/deployer/ClasspathFilterBuilder.java
URL: 
http://svn.apache.org/viewvc/river/jtsk/skunk/surrogate/src/org/apache/river/container/deployer/ClasspathFilterBuilder.java?rev=1333864&r1=1333863&r2=1333864&view=diff
==============================================================================
--- 
river/jtsk/skunk/surrogate/src/org/apache/river/container/deployer/ClasspathFilterBuilder.java
 (original)
+++ 
river/jtsk/skunk/surrogate/src/org/apache/river/container/deployer/ClasspathFilterBuilder.java
 Fri May  4 10:31:29 2012
@@ -84,7 +84,8 @@ public class ClasspathFilterBuilder {
             }
             if (node instanceof ASTliteral) {
                 log.fine("Building ResourceAcceptor with string '" + 
node.toString() + "'");
-                Acceptor acc = new ResourceAcceptor(node.toString());
+                ASTliteral lNode=(ASTliteral) node;
+                Acceptor acc = new ResourceAcceptor((String)lNode.getValue());
                 cpf.getAcceptors().add(acc);
             }
         }

Modified: 
river/jtsk/skunk/surrogate/testfiles/testroot/profile/default/service-starter.cfg
URL: 
http://svn.apache.org/viewvc/river/jtsk/skunk/surrogate/testfiles/testroot/profile/default/service-starter.cfg?rev=1333864&r1=1333863&r2=1333864&view=diff
==============================================================================
--- 
river/jtsk/skunk/surrogate/testfiles/testroot/profile/default/service-starter.cfg
 (original)
+++ 
river/jtsk/skunk/surrogate/testfiles/testroot/profile/default/service-starter.cfg
 Fri May  4 10:31:29 2012
@@ -20,21 +20,37 @@
 
 // Grants given to all applications.
 grant {
+    //java.security.AllPermission;
     //java.io.FilePermission "${serviceArchive}" "read";
-    java.io.FilePermission "*" "read";
-    java.net.SocketPermission "*" "connect";
+    java.io.FilePermission "-" "read";
+    java.net.SocketPermission "*" "connect,listen,accept,resolve";
 
     // Required for VFSFileManager
     java.util.PropertyPermission "java.io.tmpdir" "read";
     java.util.PropertyPermission "os.*" "read";
     java.util.PropertyPermission "path.*" "read";
     java.lang.RuntimePermission "getClassLoader";
+    java.lang.RuntimePermission "setContextClassLoader";
     /* net.jini.security.Security requires createSecurityManager, but we
     don't grant 'setSecurityManager'. */
     java.lang.RuntimePermission "createSecurityManager";
     java.lang.RuntimePermission "getProtectionDomain";
+    java.lang.RuntimePermission "setFactory";
+    java.lang.RuntimePermission "modifyThread";
+    java.lang.RuntimePermission "modifyThreadGroup";
     java.security.SecurityPermission "getDomainCombiner";
     java.security.SecurityPermission "createAccessControlContext";
+    java.security.SecurityPermission "getPolicy";
+    net.jini.security.policy.UmbrellaGrantPermission;
+    com.sun.jini.thread.ThreadPoolPermission "getSystemThreadPool";
+    com.sun.jini.thread.ThreadPoolPermission "getUserThreadPool";
+    com.sun.jini.discovery.internal.EndpointInternalsPermission "set";
+    com.sun.jini.discovery.internal.EndpointInternalsPermission "get";
+    java.lang.reflect.ReflectPermission "suppressAccessChecks";
+    net.jini.export.ExportPermission "exportRemoteInterface.*";
+    net.jini.discovery.DiscoveryPermission "*";
+    java.lang.RuntimePermission "shutdownHooks";
+    java.util.PropertyPermission "*" "read";
 }
 
 classloader {


Reply via email to