Eclipse
/
jetty.project
mirror of https://github.com/jetty/jetty.project.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

converted to reflection based custom policy loading 

git-svn-id: svn+ssh://dev.eclipse.org/svnroot/rt/org.eclipse.jetty/jetty/trunk@360 7e9141cc-0065-0410-87d8-b60c137991c4
This commit is contained in:
Jesse McConnell 2009-06-10 19:19:35 +00:00
parent 5c7dfe1dbb
commit b9b14e438e
4 changed files with 16 additions and 75 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
jetty-start/pom.xml
View File

@ -25,4 +25,11 @@
<properties>
<start-jar-file-name>start.jar</start-jar-file-name>
</properties>
<dependencies>
<dependency>
<groupId>junit</groupId>
<artifactId>junit</artifactId>
<scope>test</scope>
</dependency>
</dependencies>
</project>

72
jetty-start/src/main/java/org/eclipse/jetty/start/CustomPolicy.java
View File

@ -1,72 +0,0 @@
package org.eclipse.jetty.start;
//========================================================================
//Copyright (c) 2003-2009 Mort Bay Consulting Pty. Ltd.
//------------------------------------------------------------------------
//All rights reserved. This program and the accompanying materials
//are made available under the terms of the Eclipse Public License v1.0
//and Apache License v2.0 which accompanies this distribution.
//The Eclipse Public License is available at
//http://www.eclipse.org/legal/epl-v10.html
//The Apache License v2.0 is available at
//http://www.opensource.org/licenses/apache2.0.php
//You may elect to redistribute this code under either of these licenses.
//========================================================================
import java.security.CodeSource;
import java.security.Permission;
import java.security.PermissionCollection;
import java.security.Policy;
import java.security.ProtectionDomain;
import java.util.Set;
/**
* CustomPolicy is initialized with a set file policy files which it parses for
* policy information the same as any other PolicyFile implementation and proxies
* the system policy implementation if the local ones do not match
*
* TODO wire in a mechanism to parse the policy files, can't believe there is no
* general way to do this..boggle, as it stands right now this will fail to load
* when using custom security policies as simply enabling the SecurityManager
* like we are kills normal jetty startup because it accesses a host of properties
* that need to be enabled in the jetty.policy file.
*
* Thinking we should pull a default policy file from the start.jar next to the
* start.config file and also allow for a default one to be specified in
* resources/jetty.policy of the distribution.
*/
public class CustomPolicy extends Policy
{
private static final Policy _originalPolicy = Policy.getPolicy();
private Set<String> _policies;
public CustomPolicy( Set<String> policies )
{
_policies = policies;
}
public PermissionCollection getPermissions(ProtectionDomain domain)
{
System.out.println ("CustomPolicy:getPermissions:" + domain );
return _originalPolicy.getPermissions(domain);
}
public boolean implies(ProtectionDomain domain, Permission permission)
{
System.out.println ("CustomPolicy:implies:" );
return _originalPolicy.implies(domain, permission);
}
public PermissionCollection getPermissions(CodeSource codesource)
{
System.out.println ("CustomPolicy:" + codesource );
return _originalPolicy.getPermissions(codesource);
}
public void refresh()
{
_originalPolicy.refresh();
}
}

9
jetty-start/src/main/java/org/eclipse/jetty/start/Main.java
View File

@ -19,6 +19,7 @@ import java.io.IOException;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.lang.reflect.Constructor;
import java.lang.reflect.InvocationTargetException;
import java.lang.reflect.Method;
import java.net.ConnectException;
@ -581,7 +582,7 @@ public class Main
else if (subject.toLowerCase().endsWith(".policy"))
{
//policy file to parse
String cn=expand(subject.substring(0,subject.length()-5));
String cn=expand(subject.substring(0,subject.length()));
if (cn!=null&&cn.length()>0)
{
if (DEBUG)
@ -694,7 +695,11 @@ public class Main
{
if ( _activeOptions.contains("policy") )
{
Policy.setPolicy( new CustomPolicy( _policies ) );
Class jettyPolicy = cl.loadClass( "org.eclipse.jetty.policy.JettyPolicy" );
Constructor c = jettyPolicy.getConstructor( new Class[] { Set.class, Map.class } );
Object policyClass = c.newInstance( _policies, _properties );
Policy.setPolicy( (Policy)policyClass );
System.setSecurityManager( new SecurityManager() );
}
else

3
jetty-start/src/main/resources/org/eclipse/jetty/start/start.config
View File

@ -145,7 +145,8 @@ $(jetty.home)/lib/jetty-http-$(version).jar
$(jetty.home)/lib/jetty-client-$(version).jar ! available org.eclipse.jetty.client.HttpClient
[All,policy]
$(jetty.home)/resources/jetty.policy always
$(jetty.home)/lib/security/jetty-policy-$(version).jar ! available org.eclipse.jetty.policy.JettyPolicy
$(jetty.home)/lib/security/jetty.policy always