Hi,

After some research about security in OSGi I've found that it is fairly difficult to find examples of how permissions are set.
The following resources proofed to be usefull:
 - http://www.mail-archive.com/[email protected]/msg05090.html
 - http://www.osgi.org/download/r4v41/r4.core.pdf
- http://felix.apache.org/site/presentations.data/Building%20Secure%20OSGi%20Applications%20Workshop.pdf

Each of the links above contain a lot of theory but nothing practical really. My goal is fairly simple: I have got multiple bundles of a specific category (webapplications) each of these webapplications have their own 'home' directory. I want Felix to limit their file system access only to this home directory and if necessary a few other specifically assigned directories.

My question: how can I achieve this permission scheme?
Related questions:
* Is specifying permissions limited to specific boundaries? (like: bundlename, should the bundle specify its own permissions, etc.)
 * How can I discriminate different 'categories'/'types' of bundles
 * What about signing the bundles? Is this necessary, how to and why?

Before I was used to create my own SecurityManager which would limit the application programmatic. I don't mind using files or some other way but I'd like to be in full control.

Is this possible and so yes can you point me (or provide me) some examples?

Regards,

Sander

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to