|
 |
4dc51a6 |
--- conf/catalina.policy~ 2016-06-17 10:20:17.649171968 -0400
|
|
|
4dc51a6 |
+++ conf/catalina.policy 2016-06-17 10:23:35.358309244 -0400
|
|
|
4dc51a6 |
@@ -50,6 +50,36 @@ grant codeBase "file:${java.home}/lib/ex
|
|
|
4dc51a6 |
permission java.security.AllPermission;
|
|
|
4dc51a6 |
};
|
|
|
4dc51a6 |
|
|
|
4dc51a6 |
+// ========== RHEL SPECIFIC CODE PERMISSIONS =======================================
|
|
|
4dc51a6 |
+
|
|
|
4dc51a6 |
+// Allowing everything in /usr/share/java allows too many unknowns to be permitted
|
|
|
4dc51a6 |
+// Specifying the individual jars that tomcat needs to function with the security manager
|
|
|
4dc51a6 |
+// is the safest way forward.
|
|
|
4dc51a6 |
+grant codeBase "file:/usr/share/java/tomcat-servlet-3.0-api.jar" {
|
|
|
4dc51a6 |
+ permission java.security.AllPermission;
|
|
|
4dc51a6 |
+};
|
|
|
4dc51a6 |
+grant codeBase "file:/usr/share/java/tomcat-jsp-2.2-api.jar" {
|
|
|
4dc51a6 |
+ permission java.security.AllPermission;
|
|
|
4dc51a6 |
+};
|
|
|
4dc51a6 |
+grant codeBase "file:/usr/share/java/tomcat-el-2.2-api.jar" {
|
|
|
4dc51a6 |
+ permission java.security.AllPermission;
|
|
|
4dc51a6 |
+};
|
|
|
4dc51a6 |
+grant codeBase "file:/usr/share/java/log4j.jar" {
|
|
|
4dc51a6 |
+ permission java.security.AllPermission;
|
|
|
4dc51a6 |
+};
|
|
|
4dc51a6 |
+grant codeBase "file:/usr/share/java/ecj.jar" {
|
|
|
4dc51a6 |
+ permission java.security.AllPermission;
|
|
|
4dc51a6 |
+};
|
|
|
4dc51a6 |
+grant codeBase "file:/usr/share/java/apache-commons-pool.jar" {
|
|
|
4dc51a6 |
+ permission java.security.AllPermission;
|
|
|
4dc51a6 |
+};
|
|
|
4dc51a6 |
+grant codeBase "file:/usr/share/java/apache-commons-dbcp.jar" {
|
|
|
4dc51a6 |
+ permission java.security.AllPermission;
|
|
|
4dc51a6 |
+};
|
|
|
4dc51a6 |
+grant codeBase "file:/usr/share/java/apache-commons-collections.jar" {
|
|
|
4dc51a6 |
+ permission java.security.AllPermission;
|
|
|
4dc51a6 |
+};
|
|
|
4dc51a6 |
+
|
|
|
4dc51a6 |
|
|
|
4dc51a6 |
// ========== CATALINA CODE PERMISSIONS =======================================
|
|
|
4dc51a6 |
|