All Packages Class Hierarchy This Package Previous Next Index
Class java.rmi.RMISecurityManager
java.lang.Object
|
+----java.lang.SecurityManager
|
+----java.rmi.RMISecurityManager
- public class RMISecurityManager
- extends SecurityManager
This class defines the RMI Stub security policy for applications
(not applets). For code loaded as a Stub, the security manager
disables all functions except class definition and access. To set a
RMISecurityManager, add the following to an application's main()
method:
System.setSecurityManager(new RMISecurityManager()); If no security
manager has been set, RMI will load stub classes only from the
local files as defined by CLASSPATH.
-
RMISecurityManager()
- Construct and initialize.
-
checkAccept(String, int)
- For now stubs can't accept connections on any port.
-
checkAccess(Thread)
- Stubs are not allowed to manipulate threads.
-
checkAccess(ThreadGroup)
- Stubs are not allowed to manipulate thread groups.
-
checkAwtEventQueueAccess()
- Checks to see if an client can get access to the AWT event queue
(disallowed from stubs).
-
checkConnect(String, int)
- Stubs can make connections if called through the RMI transport.
-
checkConnect(String, int, Object)
- Downloaded classes (including stubs) can make connections if
called through the RMI transport.
-
checkCreateClassLoader()
- Stubs are not allowed to create class loaders, or even execute any
of ClassLoader's methods.
-
checkDelete(String)
- Check if a file with the specified system dependent
file name can be deleted.
-
checkExec(String)
- Stubs are not allowed to fork processes.
-
checkExit(int)
- Stubs are not allowed to exit the VM.
-
checkLink(String)
- Stubs are not allowed to link dynamic libraries.
-
checkListen(int)
- For now stubs can't listen on any port.
-
checkMemberAccess(Class, int)
- Checks to see if client code can access class members.
-
checkMulticast(InetAddress)
- Checks to see if current execution context is allowed to use
(join/leave/send/receive) IP multicast (disallowed from stubs).
-
checkMulticast(InetAddress, byte)
- Checks to see if current execution context is allowed to use
(join/leave/send/receive) IP multicast (disallowed from stubs).
-
checkPackageAccess(String)
- Check if a stub can access a package.
-
checkPackageDefinition(String)
- Check if a stub can define classes in a package.
-
checkPrintJobAccess()
- Disallow printing from stubs.
-
checkPropertiesAccess()
- Stubs are not allowed to access the entire system properties
list, only properties explicitly labeled as accessible to stubs.
-
checkPropertyAccess(String)
- Stubs can access the system property named by key
only if its twin key.stub property is set to true.
-
checkRead(FileDescriptor)
- Stubs are not allowed to open file descriptors for reading unless
it is done through a socket, in which case other access
restrictions still apply.
-
checkRead(String)
- Check if a stub can read a particular file.
-
checkRead(String, Object)
- No file reads are valid from a stub.
-
checkSecurityAccess(String)
- Stubs cannot perform security provider operations.
-
checkSetFactory()
- Check if a stub can set a networking-related object factory.
-
checkSystemClipboardAccess()
- Checks to see if an client can get access to the System Clipboard
(disallowed from stubs).
-
checkTopLevelWindow(Object)
- Allow caller to create top-level windows.
-
checkWrite(FileDescriptor)
- Stubs are not allowed to open file descriptors for writing unless
it is done through a socket, in which case other access
restrictions still apply.
-
checkWrite(String)
- Check if a Stub can write a particular file.
-
getSecurityContext()
- Returns the security context (e.g., a URL).
RMISecurityManager
method RMISecurityManager() public
- Construct and initialize.
getSecurityContext
method getSecurityContext() returns Object public
- Returns the security context (e.g., a URL).
- Overrides:
- getSecurityContext in class SecurityManager
checkCreateClassLoader
method checkCreateClassLoader() public protect
- Stubs are not allowed to create class loaders, or even execute any
of ClassLoader's methods.
- Overrides:
- checkCreateClassLoader in class SecurityManager
checkAccess
method checkAccess(t=Thread) public protect
- Stubs are not allowed to manipulate threads.
- Overrides:
- checkAccess in class SecurityManager
checkAccess
method checkAccess(g=ThreadGroup) public protect
- Stubs are not allowed to manipulate thread groups.
- Overrides:
- checkAccess in class SecurityManager
checkExit
method checkExit(status=int) public protect
- Stubs are not allowed to exit the VM.
- Overrides:
- checkExit in class SecurityManager
checkExec
method checkExec(cmd=String) public protect
- Stubs are not allowed to fork processes.
- Overrides:
- checkExec in class SecurityManager
checkLink
method checkLink(lib=String) public protect
- Stubs are not allowed to link dynamic libraries.
- Overrides:
- checkLink in class SecurityManager
checkPropertiesAccess
method checkPropertiesAccess() public protect
- Stubs are not allowed to access the entire system properties
list, only properties explicitly labeled as accessible to stubs.
- Overrides:
- checkPropertiesAccess in class SecurityManager
checkPropertyAccess
method checkPropertyAccess(key=String) public protect
- Stubs can access the system property named by key
only if its twin key.stub property is set to true.
For example, the property
java.home can be read by
stubs only if java.home.stub is true.
- Overrides:
- checkPropertyAccess in class SecurityManager
checkRead
method checkRead(file=String) public protect
- Check if a stub can read a particular file.
- Overrides:
- checkRead in class SecurityManager
checkRead
method checkRead(file=String, -
context=Object) public
- No file reads are valid from a stub.
- Throws: SecurityException
- If called from a stub class.
- Overrides:
- checkRead in class SecurityManager
checkWrite
method checkWrite(file=String) public protect
- Check if a Stub can write a particular file.
- Throws: SecurityException
- If called from a stub class.
- Overrides:
- checkWrite in class SecurityManager
checkDelete
method checkDelete(file=String) public
- Check if a file with the specified system dependent
file name can be deleted.
- Parameters:
- file - the system dependent file name
- Throws: SecurityException
- If the file is not found.
- Overrides:
- checkDelete in class SecurityManager
checkRead
method checkRead(fd=FileDescriptor) public protect
- Stubs are not allowed to open file descriptors for reading unless
it is done through a socket, in which case other access
restrictions still apply.
- Overrides:
- checkRead in class SecurityManager
checkWrite
method checkWrite(fd=FileDescriptor) public protect
- Stubs are not allowed to open file descriptors for writing unless
it is done through a socket, in which case other access
restrictions still apply.
- Overrides:
- checkWrite in class SecurityManager
checkListen
method checkListen(port=int) public protect
- For now stubs can't listen on any port.
- Overrides:
- checkListen in class SecurityManager
checkAccept
method checkAccept(host=String, -
port=int) public protect
- For now stubs can't accept connections on any port.
- Overrides:
- checkAccept in class SecurityManager
checkMulticast
method checkMulticast(maddr=InetAddress) public
- Checks to see if current execution context is allowed to use
(join/leave/send/receive) IP multicast (disallowed from stubs).
- Overrides:
- checkMulticast in class SecurityManager
checkMulticast
method checkMulticast(maddr=InetAddress, -
ttl=byte) public
- Checks to see if current execution context is allowed to use
(join/leave/send/receive) IP multicast (disallowed from stubs).
- Overrides:
- checkMulticast in class SecurityManager
checkConnect
method checkConnect(host=String, -
port=int) public protect
- Stubs can make connections if called through the RMI transport.
- Overrides:
- checkConnect in class SecurityManager
checkConnect
method checkConnect(host=String, -
port=int, -
context=Object) public
- Downloaded classes (including stubs) can make connections if
called through the RMI transport.
- Overrides:
- checkConnect in class SecurityManager
checkTopLevelWindow
method checkTopLevelWindow(window=Object) returns boolean public protect
- Allow caller to create top-level windows.
Allow stubs to create windows with warnings.
- Overrides:
- checkTopLevelWindow in class SecurityManager
checkPackageAccess
method checkPackageAccess(pkg=String) public protect
- Check if a stub can access a package.
- Overrides:
- checkPackageAccess in class SecurityManager
checkPackageDefinition
method checkPackageDefinition(pkg=String) public protect
- Check if a stub can define classes in a package.
- Overrides:
- checkPackageDefinition in class SecurityManager
checkSetFactory
method checkSetFactory() public protect
- Check if a stub can set a networking-related object factory.
- Overrides:
- checkSetFactory in class SecurityManager
checkPrintJobAccess
method checkPrintJobAccess() public
- Disallow printing from stubs.
- Overrides:
- checkPrintJobAccess in class SecurityManager
checkSystemClipboardAccess
method checkSystemClipboardAccess() public
- Checks to see if an client can get access to the System Clipboard
(disallowed from stubs).
- Overrides:
- checkSystemClipboardAccess in class SecurityManager
checkAwtEventQueueAccess
method checkAwtEventQueueAccess() public
- Checks to see if an client can get access to the AWT event queue
(disallowed from stubs).
- Overrides:
- checkAwtEventQueueAccess in class SecurityManager
checkMemberAccess
method checkMemberAccess(clazz=Class, -
which=int) public
- Checks to see if client code can access class members.
Allow access to all public information.
Allow non-stubs to access default, package, and private declarations
(and data).
- Overrides:
- checkMemberAccess in class SecurityManager
checkSecurityAccess
method checkSecurityAccess(provider=String) public
- Stubs cannot perform security provider operations.
- Overrides:
- checkSecurityAccess in class SecurityManager
All Packages Class Hierarchy This Package Previous Next Index