Problem with policy file

[Kurro Zaki]

I have a weird problem with my policy file.
I want code in F:\Users\xxxxxx\Documents\NetBeansProjects\Nimbus\build\classes\org\nimbus\kernel\ to have all permissions. So I write the following policy file:

grant codeBase "file:/F:/Users/xxxxxx/Documents/NetBeansProjects/Nimbus/build/classes/org/nimbus/kernel" {
  permission java.security.AllPermission;
};

But if I now want to open a PrintStream to F:\Users\xxxxxx\Documents\NetBeansProjects\Nimbus\build\classes\log\1260255799533.log I get a java.security.AccessControlException

The code:

package org.nimbus.kernel;

import java.io.FileInputStream;
import java.io.InputStream;
import java.io.PrintStream;
import java.net.URL;
import java.security.AccessController;
import java.security.PrivilegedActionException;
import java.util.Properties;


public class main {
    static long systemStartTime = System.currentTimeMillis();
    boolean hubMode;
    boolean logedIn;
    static String logStreamBaseURL;
    static String logStreamURL; //  logStreamBaseURL/systemStartTime.log
    static PrintStream err;
    static InputStream in;
    static PrintStream out;
    static private PrintStream logStream;

    public static void main(String args[]){


        loadSettings();
        initStreams();
    }
    private static void loadSettings(){
        Properties configFile = new Properties();
        try{
            String location = main.class.getResource("main.class").getPath();
            location = location.substring(1, location.length() - 29) + "/etc/SystemConfig.properties";
            configFile.load(new FileInputStream(location));
        }catch(java.io.IOException e){
            System.out.println("Error: Properties file cannot be loaded. Kernel will stop loading");
            e.printStackTrace();
            System.exit(1);
        }
        logStreamBaseURL = configFile.getProperty("LOG_BASE_URL");
    }

    private static void initStreams(){
        logStreamURL = logStreamBaseURL + "/" + systemStartTime + ".log";
        mainPrivileged privilegedCode = new mainPrivileged();
        privilegedCode.init("openLogStream", logStreamURL, "UTF-16");
        try {
            logStream = (PrintStream) AccessController.doPrivileged(privilegedCode);
        } catch (PrivilegedActionException ex) {
            ex.printStackTrace();
            System.exit(5);
        }
            
        log("System started at: "+systemStartTime);
        out = System.out;
        in = System.in;
        log("Streams created");
    }
    

}

package org.nimbus.kernel;

import java.io.FileNotFoundException;
import java.io.IOException;
import java.io.PrintStream;
import java.security.PrivilegedExceptionAction;

final class mainPrivileged implements PrivilegedExceptionAction{
    private String method;
    private String[] args;

    protected mainPrivileged(){
    }

    final protected void init(String meth, String... argS){
        method = meth;
        args = argS;
    }

    final public Object run() throws FileNotFoundException, IOException {
        if(method == null){
            throw new NullPointerException("Please use init first");
        }else if(method.equals("openLogStream")){
            return new PrintStream(args[0], args[1]);
        }else{
            throw new UnsupportedOperationException("Not supported yet.");
        }
    }
}

the stacktrace:

Exception in thread "main" java.security.AccessControlException: access denied (java.io.FilePermission F:\Users\xxxxxx\Documents\NetBeansProjects\Nimbus\build\classes\log\1260255799533.log write)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
        at java.security.AccessController.checkPermission(AccessController.java:546)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at java.lang.SecurityManager.checkWrite(SecurityManager.java:962)
        at java.io.FileOutputStream.<init>(FileOutputStream.java:169)
        at java.io.FileOutputStream.<init>(FileOutputStream.java:70)
        at java.io.PrintStream.<init>(PrintStream.java:196)
        at org.nimbus.kernel.mainPrivileged.run(mainPrivileged.java:33)
        at java.security.AccessController.doPrivileged(Native Method)
        at org.nimbus.kernel.main.initStreams(main.java:71)
        at org.nimbus.kernel.main.main(main.java:43)
Java Result: 1

The only way I can get around the exception is by changing the codebase to file:/F:/Users/Jan-Pieter/Documents/NetBeansProjects/Nimbus/build/classes

But this is unacceptable as I don't trust all the code in that directory. I only want file:/F:/Users/xxxxxx/Documents/NetBeansProjects/Nimbus/build/classes/org/nimbus/kernel to get all the permissions


What is the problem with this? I can't figure it out.

Thanks in advance

[Ulf Dittmer]

codeBase works somewhat like the classpath - you can specify a jar file or a directory containing the root of a class file hierarchy, but not arbitrary directories in the middle of the package hierarchy.

The easiest would probably be to move the class needing special permissions to its own jar file, and grant that jar file the permission. Handling that can easily be automated in the build file.

[Kurro Zaki]

That was the problem. Thanks very much.