1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
|
// Copyright (C) 2001-2003 Jon A. Maxwell (JAM)
//
// This library is free software; you can redistribute it and/or
// modify it under the terms of the GNU Lesser General Public
// License as published by the Free Software Foundation; either
// version 2.1 of the License, or (at your option) any later version.
//
// This library is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
// Lesser General Public License for more details.
//
// You should have received a copy of the GNU Lesser General Public
// License along with this library; if not, write to the Free Software
// Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
package net.sourceforge.jnlp;
import java.io.*;
import java.net.*;
import java.util.*;
import java.security.*;
import java.awt.AWTPermission;
import net.sourceforge.jnlp.runtime.DeploymentConfiguration;
import net.sourceforge.jnlp.runtime.JNLPRuntime;
/**
* The security element.
*
* @author <a href="mailto:jmaxwell@users.sourceforge.net">Jon A. Maxwell (JAM)</a> - initial author
* @version $Revision: 1.7 $
*/
public class SecurityDesc {
/*
* We do not verify security here, the classloader deals with security
*/
/** All permissions. */
public static final Object ALL_PERMISSIONS = "All";
/** Applet permissions. */
public static final Object SANDBOX_PERMISSIONS = "Sandbox";
/** J2EE permissions. */
public static final Object J2EE_PERMISSIONS = "J2SE";
/** permissions type */
private Object type;
/** the download host */
private String downloadHost;
/** whether sandbox applications should get the show window without banner permission */
private final boolean grantAwtPermissions;
/** the JNLP file */
private JNLPFile file;
// We go by the rules here:
// http://java.sun.com/docs/books/tutorial/deployment/doingMoreWithRIA/properties.html
// Since this is security sensitive, take a conservative approach:
// Allow only what is specifically allowed, and deny everything else
/** basic permissions for restricted mode */
private static Permission j2eePermissions[] = {
new AWTPermission("accessClipboard"),
// disabled because we can't at this time prevent an
// application from accessing other applications' event
// queues, or even prevent access to security dialog queues.
//
// new AWTPermission("accessEventQueue"),
new RuntimePermission("exitVM"),
new RuntimePermission("loadLibrary"),
new RuntimePermission("queuePrintJob"),
new SocketPermission("*", "connect"),
new SocketPermission("localhost:1024-", "accept, listen"),
new FilePermission("*", "read, write"),
new PropertyPermission("*", "read"),
};
/** basic permissions for restricted mode */
private static Permission sandboxPermissions[] = {
new SocketPermission("localhost:1024-", "listen"),
// new SocketPermission("<DownloadHost>", "connect, accept"), // added by code
new PropertyPermission("java.version", "read"),
new PropertyPermission("java.vendor", "read"),
new PropertyPermission("java.vendor.url", "read"),
new PropertyPermission("java.class.version", "read"),
new PropertyPermission("os.name", "read"),
new PropertyPermission("os.version", "read"),
new PropertyPermission("os.arch", "read"),
new PropertyPermission("file.separator", "read"),
new PropertyPermission("path.separator", "read"),
new PropertyPermission("line.separator", "read"),
new PropertyPermission("java.specification.version", "read"),
new PropertyPermission("java.specification.vendor", "read"),
new PropertyPermission("java.specification.name", "read"),
new PropertyPermission("java.vm.specification.vendor", "read"),
new PropertyPermission("java.vm.specification.name", "read"),
new PropertyPermission("java.vm.version", "read"),
new PropertyPermission("java.vm.vendor", "read"),
new PropertyPermission("java.vm.name", "read"),
new PropertyPermission("javawebstart.version", "read"),
new PropertyPermission("javaplugin.*", "read"),
new PropertyPermission("jnlp.*", "read,write"),
new PropertyPermission("javaws.*", "read,write"),
new RuntimePermission("exitVM"),
new RuntimePermission("stopThread"),
// disabled because we can't at this time prevent an
// application from accessing other applications' event
// queues, or even prevent access to security dialog queues.
//
// new AWTPermission("accessEventQueue"),
};
/** basic permissions for restricted mode */
private static Permission jnlpRIAPermissions[] = {
new PropertyPermission("awt.useSystemAAFontSettings", "read,write"),
new PropertyPermission("http.agent", "read,write"),
new PropertyPermission("http.keepAlive", "read,write"),
new PropertyPermission("java.awt.syncLWRequests", "read,write"),
new PropertyPermission("java.awt.Window.locationByPlatform", "read,write"),
new PropertyPermission("javaws.cfg.jauthenticator", "read,write"),
new PropertyPermission("javax.swing.defaultlf", "read,write"),
new PropertyPermission("sun.awt.noerasebackground", "read,write"),
new PropertyPermission("sun.awt.erasebackgroundonresize", "read,write"),
new PropertyPermission("sun.java2d.d3d", "read,write"),
new PropertyPermission("sun.java2d.dpiaware", "read,write"),
new PropertyPermission("sun.java2d.noddraw", "read,write"),
new PropertyPermission("sun.java2d.opengl", "read,write"),
new PropertyPermission("swing.boldMetal", "read,write"),
new PropertyPermission("swing.metalTheme", "read,write"),
new PropertyPermission("swing.noxp", "read,write"),
new PropertyPermission("swing.useSystemFontSettings", "read,write"),
};
/**
* Create a security descriptor.
*
* @param file the JNLP file
* @param type the type of security
* @param downloadHost the download host (can always connect to)
*/
public SecurityDesc(JNLPFile file, Object type, String downloadHost) {
this.file = file;
this.type = type;
this.downloadHost = downloadHost;
String key = DeploymentConfiguration.KEY_SECURITY_ALLOW_HIDE_WINDOW_WARNING;
grantAwtPermissions = Boolean.valueOf(JNLPRuntime.getConfiguration().getProperty(key));
}
/**
* Returns the permissions type, one of: ALL_PERMISSIONS,
* SANDBOX_PERMISSIONS, J2EE_PERMISSIONS.
*/
public Object getSecurityType() {
return type;
}
/**
* Returns a PermissionCollection containing the basic
* permissions granted depending on the security type.
*/
public PermissionCollection getPermissions() {
PermissionCollection permissions = getSandBoxPermissions();
// discard sandbox, give all
if (type == ALL_PERMISSIONS) {
permissions = new Permissions();
permissions.add(new AllPermission());
return permissions;
}
// add j2ee to sandbox if needed
if (type == J2EE_PERMISSIONS)
for (int i = 0; i < j2eePermissions.length; i++)
permissions.add(j2eePermissions[i]);
return permissions;
}
/**
* Returns a PermissionCollection containing the sandbox permissions
*/
public PermissionCollection getSandBoxPermissions() {
Permissions permissions = new Permissions();
for (int i = 0; i < sandboxPermissions.length; i++)
permissions.add(sandboxPermissions[i]);
if (grantAwtPermissions) {
permissions.add(new AWTPermission("showWindowWithoutWarningBanner"));
}
if (file.isApplication())
for (int i = 0; i < jnlpRIAPermissions.length; i++)
permissions.add(jnlpRIAPermissions[i]);
if (downloadHost != null)
permissions.add(new SocketPermission(downloadHost,
"connect, accept"));
return permissions;
}
}
|
