Hello,
short follow-up: when using
java -Djava.security.manager -Djava.security.debug=all -cp lib\tools.jar
jdk.nashorn.tools.Shell
the security manager is installed and in effect. However the system
policy does not apply. It looks like there is a "new" protection domain
"null" which is not granted by java.policy:
...
access: domain that failed ProtectionDomain null
null
<no principals>
java.security.Permissions@7fe8ea47 (
("java.lang.RuntimePermission"
"accessClassInPackage.jdk.nashorn.internal.runtime")
("java.lang.RuntimePermission"
"accessClassInPackage.jdk.nashorn.internal.scripts")
("java.lang.RuntimePermission"
"accessClassInPackage.jdk.nashorn.internal.objects")
("java.lang.RuntimePermission"
"accessClassInPackage.jdk.nashorn.internal.runtime.linker")
("java.lang.RuntimePermission"
"accessClassInPackage.jdk.nashorn.internal.runtime.arrays")
)
java.security.AccessControlException: access denied
("java.util.PropertyPermission" "java.version" "read")
jjs>
