You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@felix.apache.org by "Romain Dubois (JIRA)" <ji...@apache.org> on 2013/04/28 12:06:16 UTC
[jira] [Created] (FELIX-4039) Add Permissions file in ConfigAdmin
bundle
Romain Dubois created FELIX-4039:
------------------------------------
Summary: Add Permissions file in ConfigAdmin bundle
Key: FELIX-4039
URL: https://issues.apache.org/jira/browse/FELIX-4039
Project: Felix
Issue Type: Improvement
Components: Configuration Admin
Affects Versions: configadmin-1.6.0
Reporter: Romain Dubois
Priority: Minor
Most of felix bundles should have a permissions file.
For ConfigAdmin bundle, I suggest the following content for "OSGI-INF/permissions.perm" file:
# Apache Felix Configuration Admin Service
# Bundle permissions
#
# Imported/Exported packages
# -> MANIFEST.MF
(org.osgi.framework.PackagePermission "org.osgi.service.log" "import")
(org.osgi.framework.PackagePermission "org.osgi.framework" "import")
(org.osgi.framework.PackagePermission "org.osgi.service.cm" "import,exportonly")
(org.osgi.framework.PackagePermission "org.apache.felix.cm" "import,exportonly")
(org.osgi.framework.PackagePermission "org.apache.felix.cm.file" "import,exportonly")
# General bundle permissions
(java.util.PropertyPermission "felix.cm.*" "read")
(org.osgi.framework.ServicePermission "org.apache.felix.cm.*" "get,register")
(org.osgi.framework.ServicePermission "org.osgi.service.cm.*" "get,register")
(org.osgi.framework.ServicePermission "org.osgi.service.log.LogService" "get")
# Manage configurations
# -> ConfigurationAdminImpl
(org.osgi.framework.AdminPermission "*" "metadata")
(org.osgi.service.cm.ConfigurationPermission "*" "configure,target")
# Handle persistent configuration files
# -> FilePersistenceManager
(java.util.PropertyPermission "user.dir" "read")
(java.io.FilePermission "-" "read,write,execute,delete")
# -> ConfigurationManager
(org.osgi.framework.ServicePermission "org.apache.felix.cm.PersistenceManager" "register")
Note: I have extracted those permissions from code analysis then tested the suggested file in simple examples.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira