On Wed, 3 Apr 2002 19:11:07 +0200
"franz reitinger" <[EMAIL PROTECTED]> wrote:

> 
> ...
> << I have a security
>       violation on socket connection even I want to connect on the server where I
> download the applet !:-|
> >>
> You're getting in touch with the sandbox model of java. An applet can be
> understand as mobile code and - of course - the system must be protected
> aggainst various attacks. Therefore a lot of things cannot be
> done by an applet.
> 
> You have to possibilities to break through this security measures:
> 1) Sign the applet
> 2) Use the Java security policy which is really nice in JDK 1.2.x and
> higher.
> Every JDK offers an app called "policytool" & this thing has a GUI frontend.
> The handling is rather simple and self-explanatory.
> 
> franzR
> 
> PS.:
> Among other things an applet can only open a socket to the server from which
> it was loaded down - provided that you removed the security constraint. An
>

That's what I'm doing but the security violation steel there !

        François

java.security.AccessControlException: access denied (java.lang.RuntimePermission 
modifyThreadGroup)
        at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:272)
        at java.security.AccessController.checkPermission(AccessController.java:399)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:545)
        at sun.applet.AppletSecurity.checkAccess(AppletSecurity.java:139)
        at java.lang.ThreadGroup.checkAccess(ThreadGroup.java:279)
        at java.lang.Thread.init(Thread.java:265)
        at java.lang.Thread.<init>(Thread.java:403)
        at javax.swing.TimerQueue.start(TimerQueue.java:76)
        at javax.swing.TimerQueue.<init>(TimerQueue.java:52)
        at javax.swing.TimerQueue.sharedInstance(TimerQueue.java:62)
        at javax.swing.Timer.timerQueue(Timer.java:172)
        at javax.swing.Timer.start(Timer.java:299)
        at bftracec.CTracePage.jbInit(CTracePage.java:80)
        at bftracec.CTracePage.<init>(CTracePage.java:37)
        at bftracec.bftracec.start(bftracec.java:53)
        at sun.applet.AppletPanel.run(AppletPanel.java:358)
        at sun.plugin.navig.motif.MotifAppletViewer.maf_run(MotifAppletViewer.java:127)
        at sun.plugin.navig.motif.MotifAppletViewer.run(MotifAppletViewer.java:123)
        at java.lang.Thread.run(Thread.java:484)
java.security.AccessControlException: access denied (java.net.SocketPermission 
127.0.0.1:4102 connect,resolve)
        at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:272)
        at java.security.AccessController.checkPermission(AccessController.java:399)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:545)
        at java.lang.SecurityManager.checkConnect(SecurityManager.java:1044)
        at java.net.Socket.<init>(Socket.java:262)
        at java.net.Socket.<init>(Socket.java:100)
        at bftracec.bftracec.start(bftracec.java:70)
        at sun.applet.AppletPanel.run(AppletPanel.java:358)
        at sun.plugin.navig.motif.MotifAppletViewer.maf_run(MotifAppletViewer.java:127)
        at sun.plugin.navig.motif.MotifAppletViewer.run(MotifAppletViewer.java:123)
        at java.lang.Thread.run(Thread.java:484)




> applet need not open connections to other servers (regardless to security
> policy).
> 
> 


----------------------------------------------------------------------
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to