diff options
| author | Sven Gothel <[email protected]> | 2014-01-22 10:58:22 +0100 |
|---|---|---|
| committer | Sven Gothel <[email protected]> | 2014-01-22 10:58:22 +0100 |
| commit | b15b2a31cb4ec8ebaaf435259a66644d81fdb4a9 (patch) | |
| tree | 17e0f3689ee792d0b92c949a20388d16dfa08b05 | |
| parent | 971190d8718bb1e2b7eafdd49cfa2523dd8a8152 (diff) | |
Refine adaption of Oracle's Deployment changes, i.e. >= 7u51
Partial revert commit 971190d8718bb1e2b7eafdd49cfa2523dd8a8152:
- Manifest: 'Permissions: sandbox'
so we do not raise privileges!
Refine description about signing, sandbox and privileges in html files.
32 files changed, 25 insertions, 95 deletions
diff --git a/jnlp-files/CustomText.jnlp b/jnlp-files/CustomText.jnlp index 9232ab5..1a10367 100644 --- a/jnlp-files/CustomText.jnlp +++ b/jnlp-files/CustomText.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/FlyingText.jnlp b/jnlp-files/FlyingText.jnlp index 9c3b303..bdbdf54 100644 --- a/jnlp-files/FlyingText.jnlp +++ b/jnlp-files/FlyingText.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/Gears.jnlp b/jnlp-files/Gears.jnlp index b677d2e..3b0da3a 100755 --- a/jnlp-files/Gears.jnlp +++ b/jnlp-files/Gears.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/GearsDebug.jnlp b/jnlp-files/GearsDebug.jnlp index 3be3340..1495ab4 100755 --- a/jnlp-files/GearsDebug.jnlp +++ b/jnlp-files/GearsDebug.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/HDR.jnlp b/jnlp-files/HDR.jnlp index c3ab8af..8685065 100755 --- a/jnlp-files/HDR.jnlp +++ b/jnlp-files/HDR.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/HDRDebug.jnlp b/jnlp-files/HDRDebug.jnlp index 4f494f1..d49f92c 100755 --- a/jnlp-files/HDRDebug.jnlp +++ b/jnlp-files/HDRDebug.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/HWShadowmapsSimple.jnlp b/jnlp-files/HWShadowmapsSimple.jnlp index 6b9aa40..51af1b8 100644 --- a/jnlp-files/HWShadowmapsSimple.jnlp +++ b/jnlp-files/HWShadowmapsSimple.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/InfiniteShadowVolumes.jnlp b/jnlp-files/InfiniteShadowVolumes.jnlp index fdbd021..ff1d3a2 100644 --- a/jnlp-files/InfiniteShadowVolumes.jnlp +++ b/jnlp-files/InfiniteShadowVolumes.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/JRefract.jnlp b/jnlp-files/JRefract.jnlp index a286273..8f63eee 100644 --- a/jnlp-files/JRefract.jnlp +++ b/jnlp-files/JRefract.jnlp @@ -10,9 +10,6 @@ <offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/JRefractNoOGL.jnlp b/jnlp-files/JRefractNoOGL.jnlp index a259182..dbc8905 100644 --- a/jnlp-files/JRefractNoOGL.jnlp +++ b/jnlp-files/JRefractNoOGL.jnlp @@ -10,9 +10,6 @@ <offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/ParticleEngine.jnlp b/jnlp-files/ParticleEngine.jnlp index 3c15973..e6ae8ce 100644 --- a/jnlp-files/ParticleEngine.jnlp +++ b/jnlp-files/ParticleEngine.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/ProceduralTexturePhysics.jnlp b/jnlp-files/ProceduralTexturePhysics.jnlp index 124edac..c5c8bd0 100644 --- a/jnlp-files/ProceduralTexturePhysics.jnlp +++ b/jnlp-files/ProceduralTexturePhysics.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/TestTextRenderer.jnlp b/jnlp-files/TestTextRenderer.jnlp index 0493e19..d08622d 100644 --- a/jnlp-files/TestTextRenderer.jnlp +++ b/jnlp-files/TestTextRenderer.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/TextCube.jnlp b/jnlp-files/TextCube.jnlp index 31edc8c..ef55d33 100644 --- a/jnlp-files/TextCube.jnlp +++ b/jnlp-files/TextCube.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/TextCubeDebug.jnlp b/jnlp-files/TextCubeDebug.jnlp index 0688557..e54aeb1 100644 --- a/jnlp-files/TextCubeDebug.jnlp +++ b/jnlp-files/TextCubeDebug.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/TextFlow.jnlp b/jnlp-files/TextFlow.jnlp index 1427505..63bcc86 100644 --- a/jnlp-files/TextFlow.jnlp +++ b/jnlp-files/TextFlow.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/VertexArrayRange.jnlp b/jnlp-files/VertexArrayRange.jnlp index 72f669d..aa90f65 100644 --- a/jnlp-files/VertexArrayRange.jnlp +++ b/jnlp-files/VertexArrayRange.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/VertexBufferObject.jnlp b/jnlp-files/VertexBufferObject.jnlp index f7c7526..febb732 100644 --- a/jnlp-files/VertexBufferObject.jnlp +++ b/jnlp-files/VertexBufferObject.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/VertexProgRefract.jnlp b/jnlp-files/VertexProgRefract.jnlp index 124ef47..887d00c 100644 --- a/jnlp-files/VertexProgRefract.jnlp +++ b/jnlp-files/VertexProgRefract.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/VertexProgWarp.jnlp b/jnlp-files/VertexProgWarp.jnlp index 8c9a71c..7374ae4 100644 --- a/jnlp-files/VertexProgWarp.jnlp +++ b/jnlp-files/VertexProgWarp.jnlp @@ -10,9 +10,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/WorldWindBasicDemo.jnlp b/jnlp-files/WorldWindBasicDemo.jnlp index 810779b..dbb52aa 100644 --- a/jnlp-files/WorldWindBasicDemo.jnlp +++ b/jnlp-files/WorldWindBasicDemo.jnlp @@ -11,9 +11,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.5+" diff --git a/jnlp-files/XTrans.jnlp b/jnlp-files/XTrans.jnlp index 0cad96e..5d4e4da 100644 --- a/jnlp-files/XTrans.jnlp +++ b/jnlp-files/XTrans.jnlp @@ -10,9 +10,6 @@ <offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/applet-gears-debug.jnlp b/jnlp-files/applet-gears-debug.jnlp index a87db59..f188997 100644 --- a/jnlp-files/applet-gears-debug.jnlp +++ b/jnlp-files/applet-gears-debug.jnlp @@ -9,9 +9,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/applet-gears-napplet.html b/jnlp-files/applet-gears-napplet.html index cb984bf..8d074e7 100644 --- a/jnlp-files/applet-gears-napplet.html +++ b/jnlp-files/applet-gears-napplet.html @@ -67,8 +67,12 @@ Java code which needs to be signed in order to deploy applets using JOGL and is the only certificate the end user must accept. </del><br/> Sadly, due to Oracle's Java Applet Plugin update 7u51, -unsigned applets are no more allowed and hence the -Applet sandbox is being taken away. +unsigned applets are no more allowed and effectively +lower the bar to create user applets with raised privileges.<br/> +Hence JogAmp Community <b>signs</b> jogl-all.jar and gluegen-rt.jar, which contain the +JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.<br/> +jogl-demos.jar's manifest file uses <i>Permissions: sandbox</i> +to <b>not raise privileges</b>. </P> </body> diff --git a/jnlp-files/applet-gears.html b/jnlp-files/applet-gears.html index 94f563f..727436a 100644 --- a/jnlp-files/applet-gears.html +++ b/jnlp-files/applet-gears.html @@ -87,10 +87,6 @@ Where the referenced JNLP file <em>applet-gears.jnlp</em> looks as follow: <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> - <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> @@ -120,8 +116,12 @@ Java code which needs to be signed in order to deploy applets using JOGL and is the only certificate the end user must accept. </del><br/> Sadly, due to Oracle's Java Applet Plugin update 7u51, -unsigned applets are no more allowed and hence the -Applet sandbox is being taken away. +unsigned applets are no more allowed and effectively +lower the bar to create user applets with raised privileges.<br/> +Hence JogAmp Community <b>signs</b> jogl-all.jar and gluegen-rt.jar, which contain the +JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.<br/> +jogl-demos.jar's manifest file uses <i>Permissions: sandbox</i> +to <b>not raise privileges</b>. </p> </body> diff --git a/jnlp-files/applet-gears.jnlp b/jnlp-files/applet-gears.jnlp index 47dbcab..bb8246d 100644 --- a/jnlp-files/applet-gears.jnlp +++ b/jnlp-files/applet-gears.jnlp @@ -9,10 +9,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> - <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/applet-gearsjoal-napplet.html b/jnlp-files/applet-gearsjoal-napplet.html index a6599d4..466b6bb 100644 --- a/jnlp-files/applet-gearsjoal-napplet.html +++ b/jnlp-files/applet-gearsjoal-napplet.html @@ -42,8 +42,12 @@ Java code which needs to be signed in order to deploy applets using JOGL and is the only certificate the end user must accept. </del><br/> Sadly, due to Oracle's Java Applet Plugin update 7u51, -unsigned applets are no more allowed and hence the -Applet sandbox is being taken away. +unsigned applets are no more allowed and effectively +lower the bar to create user applets with raised privileges.<br/> +Hence JogAmp Community <b>signs</b> jogl-all.jar and gluegen-rt.jar, which contain the +JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.<br/> +jogl-demos.jar's manifest file uses <i>Permissions: sandbox</i> +to <b>not raise privileges</b>. </P> </body> diff --git a/jnlp-files/applet-gearsjoal.html b/jnlp-files/applet-gearsjoal.html index 24068ab..52969be 100644 --- a/jnlp-files/applet-gearsjoal.html +++ b/jnlp-files/applet-gearsjoal.html @@ -44,8 +44,12 @@ Java code which needs to be signed in order to deploy applets using JOGL and is the only certificate the end user must accept. </del><br/> Sadly, due to Oracle's Java Applet Plugin update 7u51, -unsigned applets are no more allowed and hence the -Applet sandbox is being taken away. +unsigned applets are no more allowed and effectively +lower the bar to create user applets with raised privileges.<br/> +Hence JogAmp Community <b>signs</b> jogl-all.jar and gluegen-rt.jar, which contain the +JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.<br/> +jogl-demos.jar's manifest file uses <i>Permissions: sandbox</i> +to <b>not raise privileges</b>. </P> </body> </html> diff --git a/jnlp-files/applet-gearsjoal.jnlp b/jnlp-files/applet-gearsjoal.jnlp index e08f3c7..c097256 100644 --- a/jnlp-files/applet-gearsjoal.jnlp +++ b/jnlp-files/applet-gearsjoal.jnlp @@ -9,9 +9,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> diff --git a/jnlp-files/version.jnlp b/jnlp-files/version.jnlp index 52806ee..9687cc6 100644 --- a/jnlp-files/version.jnlp +++ b/jnlp-files/version.jnlp @@ -9,9 +9,6 @@ <offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/worldwind.jnlp b/jnlp-files/worldwind.jnlp index 452e1e2..816da5f 100644 --- a/jnlp-files/worldwind.jnlp +++ b/jnlp-files/worldwind.jnlp @@ -11,9 +11,6 @@ <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.5+" initial-heap-size="512m" diff --git a/manifest.mf b/manifest.mf index e177565..2503898 100644 --- a/manifest.mf +++ b/manifest.mf @@ -8,5 +8,5 @@ Implementation-Commit: @SCM_COMMIT@ Implementation-Vendor: JogAmp Community Implementation-URL: http://jogamp.org/ Implementation-Vendor-Id: com.jogamp -Permissions: all-permissions +Permissions: sandbox @JAR_CODEBASE_TAG@ |