8166632: Document how to grant permissions for a module jrt:/<module> in the image

Reviewed-by: alanb, mchung
This commit is contained in:
Sean Mullan 2016-10-05 12:36:01 -04:00
parent 604bf5b7d6
commit 5275bebcab

View File

@ -1,5 +1,18 @@
// default permissions granted to all domains
//
// This system policy file grants a set of default permissions to all domains
// and can be configured to grant additional permissions to modules and other
// code sources. The code source URL scheme for modules linked into a
// run-time image is "jrt".
//
// For example, to grant permission to read the "foo" property to the module
// "com.greetings", the grant entry is:
//
// grant codeBase "jrt:/com.greetings" {
// permission java.util.PropertyPermission "foo", "read";
// };
//
// default permissions granted to all domains
grant {
// allows anyone to listen on dynamic ports
permission java.net.SocketPermission "localhost:0", "listen";