svn commit: r821473 - in /incubator/river/jtsk/trunk/qa/jtreg: com/sun/jini/action/catchSecurityException/ java/rmi/server/RMIClassLoader/loadProxyClasses/ net/jini/activation/Activatable/activateExceptionTest/ net/jini/activation/Activatable/activateF...

[pe...@apache.org]

Author: peter_firmstone
Date: Sun Oct  4 07:42:32 2009
New Revision: 821473

URL: http://svn.apache.org/viewvc?rev=821473&view=rev
Log:
Setup build process for jtreg tests.

I've altered the jtreg command and added targets to move the required jar files ( into a temporary directory instead of have to install into the jre extensions directory.

I've granted AllPermission to jsk-lib.jar, jsk-plaform.jar, jsk.policy.jar, jsk-resources.jar and phoenix-init.jar in all the test policy files.

In order for these files to get proper AllPermission for full access these jar files will need to be signed in the build process, since they are no longer being accessed from the jre/lib/ext/ directory.

Jonathan could you set up the signing certificates for me please?

After setting the JT_HOME="path to jtreg home" and JAVA_HOME="path to jdk1.5" environment variables the jtreg tests should run successfully.


Modified:
    incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy
    incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy

Modified: incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy Sun Oct  4 07:42:32 2009
@@ -2,7 +2,24 @@
  * security policy used by the test process
  */
 
-grant codebase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy Sun Oct  4 07:42:32 2009
@@ -3,9 +3,26 @@
  */
 
 grant codeBase "file:${java.home}/lib/ext/*" {
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy Sun Oct  4 07:42:32 2009
@@ -3,9 +3,26 @@
  */
 
 grant codeBase "file:${java.home}/lib/ext/*" {
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy Sun Oct  4 07:42:32 2009
@@ -3,9 +3,26 @@
  */
 
 grant codeBase "file:${java.home}/lib/ext/*" {
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy Sun Oct  4 07:42:32 2009
@@ -2,10 +2,27 @@
  * security policy used by the test process
  */
 
-grant codeBase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" { 
+        permission java.security.AllPermission; 
+};
+ 
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy Sun Oct  4 07:42:32 2009
@@ -3,9 +3,26 @@
  */
 
 grant codeBase "file:${java.home}/lib/ext/*" {
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // need to move some classes out of the tests classpath; specific to this test
   permission java.io.FilePermission "${test.classes}", "read,write,delete";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy Sun Oct  4 07:42:32 2009
@@ -3,9 +3,26 @@
  */
 
 grant codeBase "file:${java.home}/lib/ext/*" {
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   permission java.io.FilePermission "<<ALL FILES>>", "read";
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy Sun Oct  4 07:42:32 2009
@@ -3,9 +3,26 @@
  */
 
 grant codeBase "file:${java.home}/lib/ext/*" {
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy Sun Oct  4 07:42:32 2009
@@ -3,9 +3,26 @@
  */
 
 grant codeBase "file:${java.home}/lib/ext/*" {
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy Sun Oct  4 07:42:32 2009
@@ -2,10 +2,27 @@
  * security policy used by the test process
  */
 
-grant codeBase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" { 
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy Sun Oct  4 07:42:32 2009
@@ -3,9 +3,26 @@
  */
 
 grant codeBase "file:${java.home}/lib/ext/*" {
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy Sun Oct  4 07:42:32 2009
@@ -2,10 +2,27 @@
  * security policy used by the test process
  */
 
-grant codeBase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" { 
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy Sun Oct  4 07:42:32 2009
@@ -3,9 +3,26 @@
  */
 
 grant codeBase "file:${java.home}/lib/ext/*" {
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy Sun Oct  4 07:42:32 2009
@@ -3,9 +3,26 @@
  */
 
 grant codeBase "file:${java.home}/lib/ext/*" {
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy Sun Oct  4 07:42:32 2009
@@ -2,10 +2,27 @@
  * security policy used by the test process
  */
 
-grant codeBase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" { 
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy Sun Oct  4 07:42:32 2009
@@ -2,10 +2,27 @@
  * security policy used by the test process
  */
 
-grant codeBase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" { 
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy Sun Oct  4 07:42:32 2009
@@ -2,10 +2,27 @@
  * security policy used by the test process
  */
 
-grant codeBase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" { 
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy Sun Oct  4 07:42:32 2009
@@ -2,10 +2,27 @@
  * security policy used by the test process
  */
 
-grant codeBase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" { 
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy Sun Oct  4 07:42:32 2009
@@ -1,7 +1,24 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+  permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
   permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // permissions needed to move classes into separate codebase directories
   permission java.io.FilePermission

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy Sun Oct  4 07:42:32 2009
@@ -1,7 +1,24 @@
-grant codeBase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" { 
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
     permission java.lang.RuntimePermission "setSecurityManager";
 };

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy Sun Oct  4 07:42:32 2009
@@ -3,9 +3,26 @@
  */
 
 grant codeBase "file:${java.home}/lib/ext/*" {
+        permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
 	permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
+    permission java.security.AllPermission;
+};
+
 grant {
   // standard test activation permissions
   permission java.io.FilePermission "..${/}..${/}test.props", "read";

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
-grant codeBase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" { 
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
-grant codeBase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" { 
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
 grant codeBase "file:${java.home}/lib/ext/*" {
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy
URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy?rev=821473&r1=821472&r2=821473&view=diff
==============================================================================
--- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy (original)
+++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy Sun Oct  4 07:42:32 2009
@@ -1,4 +1,21 @@
-grant codeBase "file:${java.home}/lib/ext/*" {
+grant codeBase "file:${java.home}/lib/ext/*" { 
+    permission java.security.AllPermission; 
+}; 
+
+grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
+    permission java.security.AllPermission;
+};
+grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
     permission java.security.AllPermission;
 };
 

Re: svn commit: r821473 - in /incubator/river/jtsk/trunk/qa/jtreg: com/sun/jini/action/catchSecurityException/ java/rmi/server/RMIClassLoader/loadProxyClasses/ net/jini/activation/Activatable/activateExceptionTest/ net/jini/activation/Activatable/activateF...

[Peter Firmstone <ji...@zeus.net.au>]

No that's ok, I can go with that, we just need to run jtreg with jdk1.5 
for now until I can figure out what to do about the kerberos client 
tools/utilities missing from jdk1.6.

We just need to set jdk1.5.home in the build.properties, this shouldn't 
affect the rest of the qa tests.

I'm happy for you to modify it to remove the env variables.

Cheers,

Peter.


Jonathan Costers wrote:
> Hi Peter
>
> Although I very much welcome most of your contribution! I have to
> disagree with re-introducing environment variables into the Ant build
> process.
>
> First of all, when we would rely on JAVA_HOME being set to JDK 1.5, the
> QA tests compile would fail, since parts of that have been moved to JDK
> 1.6 API (cfr. Peter Jones' message).
> (side note: I believe we should do the same move and make the jtreg
> tests work with JDK 1.6, just like the QA tests)
>
> Think of it this way: when you, your IDE, or Hudson builds River, it
> calls Ant. Ant usually relies on JAVA_HOME to find its JDK. We have no
> way to change an environment variable from Ant while it is running.
>
> Also, while it may be possible to set custom environment variables
> (JTREG_HOME) on the Hudson server, it would involve calling a shell
> script and would be cumbersome compared to the properties mechanism we
> already have available in Ant. 
>
> You state in a comment inside qa/build.xml that you want to avoid
> accidental svn commits of build.properties. However, this file has been
> set to be ignored by svn, so no issue there. This is meant to be a user
> specified file, where you can override all properties in the build
> process when building manually or from an IDE.
>
> Even then, you can do something like this:
> ant -Djtreg.home=$JTREG_HOME -Djtreg.jdk=$JAVA_HOME jtreg
> if you really wanted to do so.
> This would in its turn override build.properties.
>
> That being said however, I think we are a big step closer to integrating
> these important tests into the build process. Good job!
>
> I will post an alternative asap, which we can discuss if you like.
>
> Thanks and best regards
> Jonathan
>
>
> Op zondag 04-10-2009 om 07:42 uur [tijdzone +0000], schreef
> peter_firmstone@apache.org:
>   
>> Author: peter_firmstone
>> Date: Sun Oct  4 07:42:32 2009
>> New Revision: 821473
>>
>> URL: http://svn.apache.org/viewvc?rev=821473&view=rev
>> Log:
>> Setup build process for jtreg tests.
>>
>> I've altered the jtreg command and added targets to move the required jar files ( into a temporary directory instead of have to install into the jre extensions directory.
>>
>> I've granted AllPermission to jsk-lib.jar, jsk-plaform.jar, jsk.policy.jar, jsk-resources.jar and phoenix-init.jar in all the test policy files.
>>
>> In order for these files to get proper AllPermission for full access these jar files will need to be signed in the build process, since they are no longer being accessed from the jre/lib/ext/ directory.
>>
>> Jonathan could you set up the signing certificates for me please?
>>
>> After setting the JT_HOME="path to jtreg home" and JAVA_HOME="path to jdk1.5" environment variables the jtreg tests should run successfully.
>>
>>
>> Modified:
>>     incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy
>>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy Sun Oct  4 07:42:32 2009
>> @@ -2,7 +2,24 @@
>>   * security policy used by the test process
>>   */
>>  
>> -grant codebase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy Sun Oct  4 07:42:32 2009
>> @@ -3,9 +3,26 @@
>>   */
>>  
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy Sun Oct  4 07:42:32 2009
>> @@ -3,9 +3,26 @@
>>   */
>>  
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy Sun Oct  4 07:42:32 2009
>> @@ -3,9 +3,26 @@
>>   */
>>  
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy Sun Oct  4 07:42:32 2009
>> @@ -2,10 +2,27 @@
>>   * security policy used by the test process
>>   */
>>  
>> -grant codeBase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" { 
>> +        permission java.security.AllPermission; 
>> +};
>> + 
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy Sun Oct  4 07:42:32 2009
>> @@ -3,9 +3,26 @@
>>   */
>>  
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // need to move some classes out of the tests classpath; specific to this test
>>    permission java.io.FilePermission "${test.classes}", "read,write,delete";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy Sun Oct  4 07:42:32 2009
>> @@ -3,9 +3,26 @@
>>   */
>>  
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    permission java.io.FilePermission "<<ALL FILES>>", "read";
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy Sun Oct  4 07:42:32 2009
>> @@ -3,9 +3,26 @@
>>   */
>>  
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy Sun Oct  4 07:42:32 2009
>> @@ -3,9 +3,26 @@
>>   */
>>  
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy Sun Oct  4 07:42:32 2009
>> @@ -2,10 +2,27 @@
>>   * security policy used by the test process
>>   */
>>  
>> -grant codeBase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" { 
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy Sun Oct  4 07:42:32 2009
>> @@ -3,9 +3,26 @@
>>   */
>>  
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy Sun Oct  4 07:42:32 2009
>> @@ -2,10 +2,27 @@
>>   * security policy used by the test process
>>   */
>>  
>> -grant codeBase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" { 
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy Sun Oct  4 07:42:32 2009
>> @@ -3,9 +3,26 @@
>>   */
>>  
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy Sun Oct  4 07:42:32 2009
>> @@ -3,9 +3,26 @@
>>   */
>>  
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy Sun Oct  4 07:42:32 2009
>> @@ -2,10 +2,27 @@
>>   * security policy used by the test process
>>   */
>>  
>> -grant codeBase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" { 
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy Sun Oct  4 07:42:32 2009
>> @@ -2,10 +2,27 @@
>>   * security policy used by the test process
>>   */
>>  
>> -grant codeBase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" { 
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy Sun Oct  4 07:42:32 2009
>> @@ -2,10 +2,27 @@
>>   * security policy used by the test process
>>   */
>>  
>> -grant codeBase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" { 
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy Sun Oct  4 07:42:32 2009
>> @@ -2,10 +2,27 @@
>>   * security policy used by the test process
>>   */
>>  
>> -grant codeBase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" { 
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,7 +1,24 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +  permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>    permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // permissions needed to move classes into separate codebase directories
>>    permission java.io.FilePermission
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,7 +1,24 @@
>> -grant codeBase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" { 
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>      permission java.lang.RuntimePermission "setSecurityManager";
>>  };
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy Sun Oct  4 07:42:32 2009
>> @@ -3,9 +3,26 @@
>>   */
>>  
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +        permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>>  	permission java.security.AllPermission;
>>  };
>>  
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>>  grant {
>>    // standard test activation permissions
>>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>> -grant codeBase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" { 
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>> -grant codeBase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" { 
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>>  grant codeBase "file:${java.home}/lib/ext/*" {
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy
>> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy?rev=821473&r1=821472&r2=821473&view=diff
>> ==============================================================================
>> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy (original)
>> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy Sun Oct  4 07:42:32 2009
>> @@ -1,4 +1,21 @@
>> -grant codeBase "file:${java.home}/lib/ext/*" {
>> +grant codeBase "file:${java.home}/lib/ext/*" { 
>> +    permission java.security.AllPermission; 
>> +}; 
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +
>> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
>> +    permission java.security.AllPermission;
>> +};
>> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>>      permission java.security.AllPermission;
>>  };
>>  
>>
>>
>>     
>
>
>   

Re: svn commit: r821473 - in /incubator/river/jtsk/trunk/qa/jtreg: com/sun/jini/action/catchSecurityException/ java/rmi/server/RMIClassLoader/loadProxyClasses/ net/jini/activation/Activatable/activateExceptionTest/ net/jini/activation/Activatable/activateF...

[Jonathan Costers <jo...@googlemail.com>]

Hi Peter

Although I very much welcome most of your contribution! I have to
disagree with re-introducing environment variables into the Ant build
process.

First of all, when we would rely on JAVA_HOME being set to JDK 1.5, the
QA tests compile would fail, since parts of that have been moved to JDK
1.6 API (cfr. Peter Jones' message).
(side note: I believe we should do the same move and make the jtreg
tests work with JDK 1.6, just like the QA tests)

Think of it this way: when you, your IDE, or Hudson builds River, it
calls Ant. Ant usually relies on JAVA_HOME to find its JDK. We have no
way to change an environment variable from Ant while it is running.

Also, while it may be possible to set custom environment variables
(JTREG_HOME) on the Hudson server, it would involve calling a shell
script and would be cumbersome compared to the properties mechanism we
already have available in Ant. 

You state in a comment inside qa/build.xml that you want to avoid
accidental svn commits of build.properties. However, this file has been
set to be ignored by svn, so no issue there. This is meant to be a user
specified file, where you can override all properties in the build
process when building manually or from an IDE.

Even then, you can do something like this:
ant -Djtreg.home=$JTREG_HOME -Djtreg.jdk=$JAVA_HOME jtreg
if you really wanted to do so.
This would in its turn override build.properties.

That being said however, I think we are a big step closer to integrating
these important tests into the build process. Good job!

I will post an alternative asap, which we can discuss if you like.

Thanks and best regards
Jonathan


Op zondag 04-10-2009 om 07:42 uur [tijdzone +0000], schreef
peter_firmstone@apache.org:
> Author: peter_firmstone
> Date: Sun Oct  4 07:42:32 2009
> New Revision: 821473
> 
> URL: http://svn.apache.org/viewvc?rev=821473&view=rev
> Log:
> Setup build process for jtreg tests.
> 
> I've altered the jtreg command and added targets to move the required jar files ( into a temporary directory instead of have to install into the jre extensions directory.
> 
> I've granted AllPermission to jsk-lib.jar, jsk-plaform.jar, jsk.policy.jar, jsk-resources.jar and phoenix-init.jar in all the test policy files.
> 
> In order for these files to get proper AllPermission for full access these jar files will need to be signed in the build process, since they are no longer being accessed from the jre/lib/ext/ directory.
> 
> Jonathan could you set up the signing certificates for me please?
> 
> After setting the JT_HOME="path to jtreg home" and JAVA_HOME="path to jdk1.5" environment variables the jtreg tests should run successfully.
> 
> 
> Modified:
>     incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy
>     incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/com/sun/jini/action/catchSecurityException/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/java/rmi/server/RMIClassLoader/loadProxyClasses/security.policy Sun Oct  4 07:42:32 2009
> @@ -2,7 +2,24 @@
>   * security policy used by the test process
>   */
>  
> -grant codebase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateExceptionTest/security.policy Sun Oct  4 07:42:32 2009
> @@ -3,9 +3,26 @@
>   */
>  
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/activateFailure/security.policy Sun Oct  4 07:42:32 2009
> @@ -3,9 +3,26 @@
>   */
>  
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/checkRegisterInLog/security.policy Sun Oct  4 07:42:32 2009
> @@ -3,9 +3,26 @@
>   */
>  
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/createPrivateActivable/security.policy Sun Oct  4 07:42:32 2009
> @@ -2,10 +2,27 @@
>   * security policy used by the test process
>   */
>  
> -grant codeBase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" { 
> +        permission java.security.AllPermission; 
> +};
> + 
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadParameterClass/security.policy Sun Oct  4 07:42:32 2009
> @@ -3,9 +3,26 @@
>   */
>  
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // need to move some classes out of the tests classpath; specific to this test
>    permission java.io.FilePermission "${test.classes}", "read,write,delete";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/downloadSecurityManager/security.policy Sun Oct  4 07:42:32 2009
> @@ -3,9 +3,26 @@
>   */
>  
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    permission java.io.FilePermission "<<ALL FILES>>", "read";
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/forceLogSnapshot/security.policy Sun Oct  4 07:42:32 2009
> @@ -3,9 +3,26 @@
>   */
>  
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/inactiveGroup/security.policy Sun Oct  4 07:42:32 2009
> @@ -3,9 +3,26 @@
>   */
>  
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nestedActivate/security.policy Sun Oct  4 07:42:32 2009
> @@ -2,10 +2,27 @@
>   * security policy used by the test process
>   */
>  
> -grant codeBase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" { 
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/nonExistentActivatable/security.policy Sun Oct  4 07:42:32 2009
> @@ -3,9 +3,26 @@
>   */
>  
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartCrashedService/security.policy Sun Oct  4 07:42:32 2009
> @@ -2,10 +2,27 @@
>   * security policy used by the test process
>   */
>  
> -grant codeBase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" { 
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/restartService/security.policy Sun Oct  4 07:42:32 2009
> @@ -3,9 +3,26 @@
>   */
>  
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/terminateGroup/security.policy Sun Oct  4 07:42:32 2009
> @@ -3,9 +3,26 @@
>   */
>  
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/Activatable/useProxyAccessor/security.policy Sun Oct  4 07:42:32 2009
> @@ -2,10 +2,27 @@
>   * security policy used by the test process
>   */
>  
> -grant codeBase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" { 
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationAdmin/getGroupsObjects/security.policy Sun Oct  4 07:42:32 2009
> @@ -2,10 +2,27 @@
>   * security policy used by the test process
>   */
>  
> -grant codeBase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" { 
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/ensureRestart/security.policy Sun Oct  4 07:42:32 2009
> @@ -2,10 +2,27 @@
>   * security policy used by the test process
>   */
>  
> -grant codeBase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" { 
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/activation/ActivationSystem/unregisterGroup/security.policy Sun Oct  4 07:42:32 2009
> @@ -2,10 +2,27 @@
>   * security policy used by the test process
>   */
>  
> -grant codeBase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" { 
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/io/MarshalInputStream/verifyWithEqualLoaders/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,7 +1,24 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +  permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>    permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // permissions needed to move classes into separate codebase directories
>    permission java.io.FilePermission
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicInvocationDispatcher/checkClientPermission/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,7 +1,24 @@
> -grant codeBase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" { 
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>      permission java.lang.RuntimePermission "setSecurityManager";
>  };
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/dgcServerExposure/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/BasicJeriExporter/operations/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/localHostExposure/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/tcp/serverSocketClose/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jeri/transport/multihomed/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/jrmp/echo/security.policy Sun Oct  4 07:42:32 2009
> @@ -3,9 +3,26 @@
>   */
>  
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +        permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
>  	permission java.security.AllPermission;
>  };
>  
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
> +    permission java.security.AllPermission;
> +};
> +
>  grant {
>    // standard test activation permissions
>    permission java.io.FilePermission "..${/}..${/}test.props", "read";
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/ClassLoading/verifyBeforeLoading/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/4881293/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
> -grant codeBase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" { 
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassLoader/urlStreamHandlerFactory/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/arrayClassNames/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
> -grant codeBase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" { 
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/constructorCheck/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/malformedAncestorURLs/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/nonURLAncestor/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
>  grant codeBase "file:${java.home}/lib/ext/*" {
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> Modified: incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy
> URL: http://svn.apache.org/viewvc/incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy?rev=821473&r1=821472&r2=821473&view=diff
> ==============================================================================
> --- incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy (original)
> +++ incubator/river/jtsk/trunk/qa/jtreg/net/jini/loader/pref/PreferredClassProvider/pinContextLoader/security.policy Sun Oct  4 07:42:32 2009
> @@ -1,4 +1,21 @@
> -grant codeBase "file:${java.home}/lib/ext/*" {
> +grant codeBase "file:${java.home}/lib/ext/*" { 
> +    permission java.security.AllPermission; 
> +}; 
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-policy.jar" {
> +    permission java.security.AllPermission;
> +};
> +
> +grant codeBase "file:${jtlib.tmp}/jsk-lib.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-platform.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/jsk-resources.jar" {
> +    permission java.security.AllPermission;
> +};
> +grant codeBase "file:${jtlib.tmp}/phoenix-init.jar" {
>      permission java.security.AllPermission;
>  };
>  
> 
> 

Re: svn commit: r821473 - in /incubator/river/jtsk/trunk/qa/jtreg: com/sun/jini/action/catchSecurityException/ java/rmi/server/RMIClassLoader/loadProxyClasses/ net/jini/activation/Activatable/activateExceptionTest/ net/jini/activation/Activatable/activateF...

[Peter Jones <pc...@roundroom.net>]

On Oct 4, 2009, at 11:01 PM, Peter Firmstone wrote:

> Peter Jones wrote:
>>
>> On Oct 4, 2009, at 3:42 AM, peter_firmstone@apache.org wrote:
[snip]

>>> In order for these files to get proper AllPermission for full  
>>> access these jar files will need to be signed in the build  
>>> process, since they are no longer being accessed from the jre/lib/ 
>>> ext/ directory.
>>>
>>> Jonathan could you set up the signing certificates for me please?
>>
>> I don't understand this-- the AllPermission grants are just to a  
>> code source, not limited to any particular signers, so they  
>> shouldn't need to be signed.

> Me either see below,  I originally granted AllPermission to the  
> JTlib-tmp directory, but later changed it when I got the no signer  
> certificates errors.
>
> The tests pass (except the usual 6 known failures) on this machine  
> when the jar files are in the jre/lib/ext/ directory
>
> Note if you've got the latest build, you'll have to edit the  
> build.xml file to turn on the security debug option.
>
> Note the jtreg -cpa: option in Ant doesn't seem to accept directory  
> classpaths JTlib-tmp/* for jar files, you have to list each jar file  
> separately.
[snip]

> access: domain that failed ProtectionDomain  (file:/opt/src/ 
> ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar <no signer  
> certificates>)

Note that this "no signer certificates" bit is just informational  
about the JAR file-- it is not claiming the root cause of the problem.

> sun.misc.Launcher$AppClassLoader@169e11
> <no principals>
> java.security.Permissions@137c60d (
> (java.util.PropertyPermission * read,write)
> (java.io.FilePermission /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/ 
> classes/com/sun/jini/tool/CheckConfigurationFile/- write)
> (java.io.FilePermission <<ALL FILES>> read)
> (java.io.FilePermission /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/ 
> classes/- read)
> (java.io.FilePermission /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib- 
> tmp/jsk-platform.jar read)
> (java.lang.RuntimePermission *)
> (java.lang.RuntimePermission exitVM)
> )

Evidently the AllPermission grant isn't getting applied to jsk- 
platform.jar in this case-- can you provide the exact test policy file  
that was in use with this failure?

-- Peter

Re: svn commit: r821473 - in /incubator/river/jtsk/trunk/qa/jtreg: com/sun/jini/action/catchSecurityException/ java/rmi/server/RMIClassLoader/loadProxyClasses/ net/jini/activation/Activatable/activateExceptionTest/ net/jini/activation/Activatable/activateF...

[Peter Jones <pc...@roundroom.net>]

On Oct 5, 2009, at 2:09 AM, Peter Firmstone wrote:

> Hi Peter,
>
> Well that explains that problem,  the Security policy file is just  
> called policy, I didn't edit that one, I only searched for  
> security.policy files, 35 in total.

I would look for all files whose names end in "policy"-- I think that  
there is a "test.policy" too.

-- Peter

Re: svn commit: r821473 - in /incubator/river/jtsk/trunk/qa/jtreg: com/sun/jini/action/catchSecurityException/ java/rmi/server/RMIClassLoader/loadProxyClasses/ net/jini/activation/Activatable/activateExceptionTest/ net/jini/activation/Activatable/activateF...

[Peter Firmstone <ji...@zeus.net.au>]

Hi Peter,

Well that explains that problem,  the Security policy file is just 
called policy, I didn't edit that one, I only searched for 
security.policy files, 35 in total.

It doesn't explain all the failures, for some reason the -Djsk.home 
option doesn't seem to be recognised consistently, perhaps one of the 
other options is interfering with it.  I found the -dir: option didn't 
always work from the command line depending upon the command 
formulation.  It was better to just specify the jtreg directory as the 
last argument on the command line.

Will get around to fixing that soon, thanks for the help.

bash-3.00$ find ./ -name "policy" -print
./net/jini/config/ConfigurationFile/TestParser/policy
./net/jini/config/TestAPI/policy
./net/jini/security/policy
./net/jini/security/policy/DynamicPolicyProvider/dynamicBasePolicy/policy
./net/jini/security/policy/DynamicPolicyProvider/principalGrants/policy
./net/jini/security/policy/DynamicPolicyProvider/domainCaching/policy
./net/jini/security/policy/DynamicPolicyProvider/basePolicyNotFound/policy
./net/jini/security/policy/DynamicPolicyProvider/nullCases/policy
./net/jini/security/policy/PolicyFileProvider/umbrellaGrants/policy
./net/jini/security/policy/PolicyFileProvider/basePolicyNotFound/policy
./net/jini/security/policy/PolicyFileProvider/nullCases/policy
./net/jini/security/ProxyPreparer/policy
./net/jini/security/Security/contextClassLoader/policy
./net/jini/security/Security/getContext/policy
./net/jini/security/Security/implicitGrants/policy
./net/jini/security/Security/doPrivileged/policy
./net/jini/security/Security/grants/policy
./net/jini/security/porter/policy
./net/jini/jeri/ssl/UnitTests/policy
./net/jini/jeri/kerberos/RegressionTests/config/policy
./com/sun/jini/config/KeyStores/policy
./com/sun/jini/tool/CheckConfigurationFile/policy


Cheers,

Peter.




grant codeBase "file:${java.home}/lib/ext/*" {
    permission java.security.AllPermission;
};

grant {
    permission java.io.FilePermission "<<ALL FILES>>", "read";
    permission java.io.FilePermission "${test.classes}${/}-", "write";
    permission java.lang.RuntimePermission "*";
    permission java.util.PropertyPermission "*", "read,write";
};


Peter Firmstone wrote:
> Peter Jones wrote:
>>
>> On Oct 4, 2009, at 3:42 AM, peter_firmstone@apache.org wrote:
>>
>>> Author: peter_firmstone
>>> Date: Sun Oct  4 07:42:32 2009
>>> New Revision: 821473
>>>
>>> URL: http://svn.apache.org/viewvc?rev=821473&view=rev
>>> Log:
>>> Setup build process for jtreg tests.
>>>
>>> I've altered the jtreg command and added targets to move the 
>>> required jar files ( into a temporary directory instead of have to 
>>> install into the jre extensions directory.
>>
>> That's a great improvement!
> Thanks!
>>
>>> I've granted AllPermission to jsk-lib.jar, jsk-plaform.jar, 
>>> jsk.policy.jar, jsk-resources.jar and phoenix-init.jar in all the 
>>> test policy files.
>>
>> I'm not sure that I would have added each of those grants 
>> individually in each test policy file, rather than just a single 
>> grant to the whole temp directory containing these JAR files (or if 
>> you're worried about possibly wanting to use this temp directory for 
>> other purposes too, a subdirectory specifically for JAR files to be 
>> granted AllPermission).  My reasoning would be just in case the set 
>> of JAR files to get this treatment (i.e. assumption of AllPermission 
>> grant) needs to be modified in the future for all of these tests 
>> (which did happen over time as these tests and their infrastructure 
>> evolved)-- it would be nice to not have to update each of these test 
>> security policy files again.
>>
>> I suppose that your approach allows each test to individually control 
>> the set of JAR files to get this treatment, but that hasn't emerged 
>> as a requirement for these tests before (evidenced by the fact that 
>> the existing grant was always to a whole directory, the JRE 
>> extensions directory).
>>
>>> In order for these files to get proper AllPermission for full access 
>>> these jar files will need to be signed in the build process, since 
>>> they are no longer being accessed from the jre/lib/ext/ directory.
>>>
>>> Jonathan could you set up the signing certificates for me please?
>>
>> I don't understand this-- the AllPermission grants are just to a code 
>> source, not limited to any particular signers, so they shouldn't need 
>> to be signed.
>>
>> -- Peter
>>
>>
> Me either see below,  I originally granted AllPermission to the 
> JTlib-tmp directory, but later changed it when I got the no signer 
> certificates errors.
>
> The tests pass (except the usual 6 known failures) on this machine 
> when the jar files are in the jre/lib/ext/ directory
>
> Note if you've got the latest build, you'll have to edit the build.xml 
> file to turn on the security debug option.
>
> Note the jtreg -cpa: option in Ant doesn't seem to accept directory 
> classpaths JTlib-tmp/* for jar files, you have to list each jar file 
> separately.
>
> access: domain that failed ProtectionDomain  
> (file:/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar 
> <no signer certificates>)
>
>
> TEST: com/sun/jini/tool/CheckConfigurationFile/TestCheck.java
> JDK under test: (/usr/jdk/jdk1.5.0_15)
> java version "1.5.0_15"
> Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_15-b04)
> Java HotSpot(TM) Server VM (build 1.5.0_15-b04, mixed mode)
>
> ACTION: build -- Passed. All files up to date
> REASON: User specified action: run build UnitTestUtilities BasicTest 
> TestLibrary Test
> TIME:   0.0020 seconds
> messages:
> command: build UnitTestUtilities BasicTest TestLibrary Test
> reason: User specified action: run build UnitTestUtilities BasicTest 
> TestLibrary Test
> elapsed time (seconds): 0.0020
>
> ACTION: build -- Passed. All files up to date
> REASON: Named class compiled on demand
> TIME:   0.0 seconds
> messages:
> command: build TestCheck
> reason: Named class compiled on demand
> elapsed time (seconds): 0.0
>
> ACTION: main -- Failed. Execution failed: `main' threw exception: 
> java.security.AccessControlException: access denied 
> (java.security.SecurityPermission getPolicy)
> REASON: User specified action: run 
> main/othervm/policy=policy/secure=NoExit TestCheck
> TIME:   2.193 seconds
> messages:
> command: main TestCheck
> reason: User specified action: run 
> main/othervm/policy=policy/secure=NoExit TestCheck
> elapsed time (seconds): 2.193
> STDOUT:
> STDERR:
> access: access allowed (java.security.SecurityPermission 
> getProperty.networkaddress.cache.ttl)
> access: access allowed (java.util.PropertyPermission 
> sun.net.inetaddr.ttl read)
> access: access allowed (java.security.SecurityPermission 
> getProperty.networkaddress.cache.negative.ttl)
> access: access allowed (java.util.PropertyPermission 
> java.system.class.loader read)
> access: access allowed (java.util.PropertyPermission java.security.egd 
> read)
> access: access allowed (java.security.SecurityPermission 
> getProperty.securerandom.source)
> access: access allowed (java.io.FilePermission /dev/random read)
> access: access allowed (java.io.FilePermission /dev/urandom read)
> access: access allowed (java.io.FilePermission /dev/random read)
> access: access allowed (java.io.FilePermission /dev/urandom read)
> access: access allowed (java.security.SecurityPermission 
> putProviderProperty.SUN)
> access: access allowed (java.io.FilePermission 
> /usr/local/java/lib/jtreg.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck.jta 
> read)
> access: access allowed (java.lang.RuntimePermission 
> accessDeclaredMembers)
> access: access allowed (java.lang.RuntimePermission 
> accessDeclaredMembers)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities$DoneException.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities$DoneException.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities$DoneException.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test$FailedException.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test$FailedException.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test$FailedException.class 
> read)
> access: access allowed (java.util.PropertyPermission testLevel read)
> access: access allowed (java.util.PropertyPermission firstTest read)
> access: access allowed (java.util.PropertyPermission lastTest read)
> access: access allowed (java.util.PropertyPermission stopOnFail read)
> access: access allowed (java.util.PropertyPermission test.src read)
> access: access allowed (java.util.PropertyPermission test.classes read)
> access: access allowed (java.util.PropertyPermission test.src read)
> access: access allowed (java.util.PropertyPermission test.classes read)
> access: access allowed (java.util.PropertyPermission 
> java.security.policy read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestArgs.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestArgs.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestArgs.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/BasicTest.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/BasicTest.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/BasicTest.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestSources.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestSources.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestSources.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestFailedException.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestFailedException.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestFailedException.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary$3.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary$3.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary$3.class 
> read)
> access: access allowed (java.util.PropertyPermission user.dir read)
> access: access allowed (java.io.FilePermission ../../test.props read)
> access: access allowed (java.io.FilePermission /vob/jive/lib/tools.jar 
> read)
> access: access allowed (java.util.PropertyPermission 
> java.rmi.server.RMIClassLoaderSpi read)
> access: access allowed (java.util.PropertyPermission 
> sun.boot.class.path read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/i18n.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/sunrsasign.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/jsse.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/jce.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/charsets.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/classes read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/classes read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/i18n.jar read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/sunrsasign.jar read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/jsse.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/jsse.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/jsse.jar read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/jce.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/jce.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/jce.jar read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/charsets.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/charsets.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/charsets.jar read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/classes read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/META-INF/services/java.rmi.server.RMIClassLoaderSpi 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/META-INF/services/java.rmi.server.RMIClassLoaderSpi 
> read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/unittestlib read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/testlibrary read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/lib/tools.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/lib/tools.jar read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/lib/tools.jar read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-policy.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-policy.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-policy.jar read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-lib.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-lib.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-lib.jar read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
> access: access allowed (java.net.NetPermission specifyStreamHandler)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider.class 
> read)
> access: access allowed (java.util.PropertyPermission 
> java.util.logging.manager read)
> access: access allowed (java.lang.RuntimePermission shutdownHooks)
> access: access allowed (java.util.logging.LoggingPermission control)
> access: access allowed (java.util.PropertyPermission 
> java.util.logging.config.class read)
> access: access allowed (java.util.PropertyPermission 
> java.util.logging.config.file read)
> access: access allowed (java.util.PropertyPermission java.home read)
> access: access allowed (java.io.FilePermission 
> /usr/jdk/instances/jdk1.5.0/jre/lib/logging.properties read)
> access: access allowed (java.util.logging.LoggingPermission control)
> access: access allowed (java.util.logging.LoggingPermission control)
> access: access allowed (java.util.logging.LoggingPermission control)
> access: access allowed (java.util.logging.LoggingPermission control)
> access: access allowed (java.util.logging.LoggingPermission control)
> access: access allowed (java.util.logging.LoggingPermission control)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/com/sun/jini/action/GetPropertyAction.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/com/sun/jini/action/GetPropertyAction.class 
> read)
> access: access allowed (java.util.logging.LoggingPermission control)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
> access: access allowed (java.util.PropertyPermission 
> java.rmi.server.codebase read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$1.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$1.class 
> read)
> access: access allowed (java.lang.RuntimePermission getClassLoader)
> access: access allowed (java.lang.reflect.ReflectPermission 
> suppressAccessChecks)
> access: access allowed (java.lang.RuntimePermission createClassLoader)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$2.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$2.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$LoaderKey.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$LoaderKey.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$3.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$3.class 
> read)
> access: access allowed (java.lang.RuntimePermission getClassLoader)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$4.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$4.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassLoader.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassLoader.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/ClassAnnotation.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/ClassAnnotation.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/DownloadPermission.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/DownloadPermission.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassLoader$4.class 
> read)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassLoader$4.class 
> read)
> access: access denied (java.security.SecurityPermission getPolicy)
> java.lang.Exception: Stack trace
>        at java.lang.Thread.dumpStack(Thread.java:1158)
>        at 
> java.security.AccessControlContext.checkPermission(AccessControlContext.java:253) 
>
>        at 
> java.security.AccessController.checkPermission(AccessController.java:427)
>        at 
> java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
>        at java.security.Policy.getPolicy(Policy.java:114)
>        at 
> net.jini.loader.pref.PreferredClassLoader$4.run(PreferredClassLoader.java:1123) 
>
>        at java.security.AccessController.doPrivileged(Native Method)
>        at 
> net.jini.loader.pref.PreferredClassLoader.getLoaderAccessControlContext(PreferredClassLoader.java:1118) 
>
>        at 
> net.jini.loader.pref.PreferredClassProvider.createClassLoader(PreferredClassProvider.java:1669) 
>
>        at 
> net.jini.loader.pref.PreferredClassProvider.lookupLoader(PreferredClassProvider.java:1618) 
>
>        at 
> net.jini.loader.pref.PreferredClassProvider.loadClass(PreferredClassProvider.java:535) 
>
>        at 
> java.rmi.server.RMIClassLoader.loadClass(RMIClassLoader.java:169)
>        at TestCheck.main(TestCheck.java:94)
>        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>        at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
>
>        at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
>
>        at java.lang.reflect.Method.invoke(Method.java:585)
>        at 
> com.sun.javatest.regtest.MainWrapper$MainThread.run(MainWrapper.java:94)
>        at java.lang.Thread.run(Thread.java:595)
> access: access allowed (java.security.SecurityPermission getPolicy)
> access: access allowed (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
> access: domain that failed ProtectionDomain  
> (file:/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar 
> <no signer certificates>)
> sun.misc.Launcher$AppClassLoader@169e11
> <no principals>
> java.security.Permissions@137c60d (
> (java.util.PropertyPermission * read,write)
> (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/- 
> write)
> (java.io.FilePermission <<ALL FILES>> read)
> (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/- read)
> (java.io.FilePermission 
> /opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
> (java.lang.RuntimePermission *)
> (java.lang.RuntimePermission exitVM)
> )
>
>
> java.security.AccessControlException: access denied 
> (java.security.SecurityPermission getPolicy)
>        at 
> java.security.AccessControlContext.checkPermission(AccessControlContext.java:264) 
>
>        at 
> java.security.AccessController.checkPermission(AccessController.java:427)
>        at 
> java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
>        at java.security.Policy.getPolicy(Policy.java:114)
>        at 
> net.jini.loader.pref.PreferredClassLoader$4.run(PreferredClassLoader.java:1123) 
>
>        at java.security.AccessController.doPrivileged(Native Method)
>        at 
> net.jini.loader.pref.PreferredClassLoader.getLoaderAccessControlContext(PreferredClassLoader.java:1118) 
>
>        at 
> net.jini.loader.pref.PreferredClassProvider.createClassLoader(PreferredClassProvider.java:1669) 
>
>        at 
> net.jini.loader.pref.PreferredClassProvider.lookupLoader(PreferredClassProvider.java:1618) 
>
>        at 
> net.jini.loader.pref.PreferredClassProvider.loadClass(PreferredClassProvider.java:535) 
>
>        at 
> java.rmi.server.RMIClassLoader.loadClass(RMIClassLoader.java:169)
>        at TestCheck.main(TestCheck.java:94)
>        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>        at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
>
>        at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
>
>        at java.lang.reflect.Method.invoke(Method.java:585)
>        at 
> com.sun.javatest.regtest.MainWrapper$MainThread.run(MainWrapper.java:94)
>        at java.lang.Thread.run(Thread.java:595)
>
> JavaTest Message: Test threw exception: 
> java.security.AccessControlException: access denied 
> (java.security.SecurityPermission getPolicy)
> JavaTest Message: shutting down test
>
> STATUS:Failed.`main' threw exception: 
> java.security.AccessControlException: access denied 
> (java.security.SecurityPermission getPolicy)
>
> TEST RESULT: Failed. Execution failed: `main' threw exception: 
> java.security.AccessControlException: access denied 
> (java.security.SecurityPermission getPolicy)
>
>

Re: svn commit: r821473 - in /incubator/river/jtsk/trunk/qa/jtreg: com/sun/jini/action/catchSecurityException/ java/rmi/server/RMIClassLoader/loadProxyClasses/ net/jini/activation/Activatable/activateExceptionTest/ net/jini/activation/Activatable/activateF...

[Peter Firmstone <ji...@zeus.net.au>]

Peter Jones wrote:
>
> On Oct 4, 2009, at 3:42 AM, peter_firmstone@apache.org wrote:
>
>> Author: peter_firmstone
>> Date: Sun Oct  4 07:42:32 2009
>> New Revision: 821473
>>
>> URL: http://svn.apache.org/viewvc?rev=821473&view=rev
>> Log:
>> Setup build process for jtreg tests.
>>
>> I've altered the jtreg command and added targets to move the required 
>> jar files ( into a temporary directory instead of have to install 
>> into the jre extensions directory.
>
> That's a great improvement!
Thanks!
>
>> I've granted AllPermission to jsk-lib.jar, jsk-plaform.jar, 
>> jsk.policy.jar, jsk-resources.jar and phoenix-init.jar in all the 
>> test policy files.
>
> I'm not sure that I would have added each of those grants individually 
> in each test policy file, rather than just a single grant to the whole 
> temp directory containing these JAR files (or if you're worried about 
> possibly wanting to use this temp directory for other purposes too, a 
> subdirectory specifically for JAR files to be granted AllPermission).  
> My reasoning would be just in case the set of JAR files to get this 
> treatment (i.e. assumption of AllPermission grant) needs to be 
> modified in the future for all of these tests (which did happen over 
> time as these tests and their infrastructure evolved)-- it would be 
> nice to not have to update each of these test security policy files 
> again.
>
> I suppose that your approach allows each test to individually control 
> the set of JAR files to get this treatment, but that hasn't emerged as 
> a requirement for these tests before (evidenced by the fact that the 
> existing grant was always to a whole directory, the JRE extensions 
> directory).
>
>> In order for these files to get proper AllPermission for full access 
>> these jar files will need to be signed in the build process, since 
>> they are no longer being accessed from the jre/lib/ext/ directory.
>>
>> Jonathan could you set up the signing certificates for me please?
>
> I don't understand this-- the AllPermission grants are just to a code 
> source, not limited to any particular signers, so they shouldn't need 
> to be signed.
>
> -- Peter
>
>
Me either see below,  I originally granted AllPermission to the 
JTlib-tmp directory, but later changed it when I got the no signer 
certificates errors.

The tests pass (except the usual 6 known failures) on this machine when 
the jar files are in the jre/lib/ext/ directory

Note if you've got the latest build, you'll have to edit the build.xml 
file to turn on the security debug option.

Note the jtreg -cpa: option in Ant doesn't seem to accept directory 
classpaths JTlib-tmp/* for jar files, you have to list each jar file 
separately.

access: domain that failed ProtectionDomain  
(file:/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar <no 
signer certificates>)


TEST: com/sun/jini/tool/CheckConfigurationFile/TestCheck.java
JDK under test: (/usr/jdk/jdk1.5.0_15)
java version "1.5.0_15"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_15-b04)
Java HotSpot(TM) Server VM (build 1.5.0_15-b04, mixed mode)

ACTION: build -- Passed. All files up to date
REASON: User specified action: run build UnitTestUtilities BasicTest 
TestLibrary Test
TIME:   0.0020 seconds
messages:
command: build UnitTestUtilities BasicTest TestLibrary Test
reason: User specified action: run build UnitTestUtilities BasicTest 
TestLibrary Test
elapsed time (seconds): 0.0020

ACTION: build -- Passed. All files up to date
REASON: Named class compiled on demand
TIME:   0.0 seconds
messages:
command: build TestCheck
reason: Named class compiled on demand
elapsed time (seconds): 0.0

ACTION: main -- Failed. Execution failed: `main' threw exception: 
java.security.AccessControlException: access denied 
(java.security.SecurityPermission getPolicy)
REASON: User specified action: run 
main/othervm/policy=policy/secure=NoExit TestCheck
TIME:   2.193 seconds
messages:
command: main TestCheck
reason: User specified action: run 
main/othervm/policy=policy/secure=NoExit TestCheck
elapsed time (seconds): 2.193
STDOUT:
STDERR:
access: access allowed (java.security.SecurityPermission 
getProperty.networkaddress.cache.ttl)
access: access allowed (java.util.PropertyPermission 
sun.net.inetaddr.ttl read)
access: access allowed (java.security.SecurityPermission 
getProperty.networkaddress.cache.negative.ttl)
access: access allowed (java.util.PropertyPermission 
java.system.class.loader read)
access: access allowed (java.util.PropertyPermission java.security.egd read)
access: access allowed (java.security.SecurityPermission 
getProperty.securerandom.source)
access: access allowed (java.io.FilePermission /dev/random read)
access: access allowed (java.io.FilePermission /dev/urandom read)
access: access allowed (java.io.FilePermission /dev/random read)
access: access allowed (java.io.FilePermission /dev/urandom read)
access: access allowed (java.security.SecurityPermission 
putProviderProperty.SUN)
access: access allowed (java.io.FilePermission 
/usr/local/java/lib/jtreg.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck.jta 
read)
access: access allowed (java.lang.RuntimePermission accessDeclaredMembers)
access: access allowed (java.lang.RuntimePermission accessDeclaredMembers)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities$DoneException.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities$DoneException.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/UnitTestUtilities$DoneException.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test$FailedException.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test$FailedException.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test$FailedException.class 
read)
access: access allowed (java.util.PropertyPermission testLevel read)
access: access allowed (java.util.PropertyPermission firstTest read)
access: access allowed (java.util.PropertyPermission lastTest read)
access: access allowed (java.util.PropertyPermission stopOnFail read)
access: access allowed (java.util.PropertyPermission test.src read)
access: access allowed (java.util.PropertyPermission test.classes read)
access: access allowed (java.util.PropertyPermission test.src read)
access: access allowed (java.util.PropertyPermission test.classes read)
access: access allowed (java.util.PropertyPermission 
java.security.policy read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestArgs.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestArgs.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestArgs.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/BasicTest.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/BasicTest.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/BasicTest.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/Test.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestSources.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestSources.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestCheck$TestSources.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestFailedException.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestFailedException.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestFailedException.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary$3.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary$3.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/TestLibrary$3.class 
read)
access: access allowed (java.util.PropertyPermission user.dir read)
access: access allowed (java.io.FilePermission ../../test.props read)
access: access allowed (java.io.FilePermission /vob/jive/lib/tools.jar read)
access: access allowed (java.util.PropertyPermission 
java.rmi.server.RMIClassLoaderSpi read)
access: access allowed (java.util.PropertyPermission sun.boot.class.path 
read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/i18n.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/sunrsasign.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/jsse.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/jce.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/charsets.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/classes read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/classes read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/rt.jar read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/i18n.jar read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/sunrsasign.jar read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/jsse.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/jsse.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/jsse.jar read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/jce.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/jce.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/jce.jar read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/charsets.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/charsets.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/charsets.jar read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/classes read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/META-INF/services/java.rmi.server.RMIClassLoaderSpi 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/META-INF/services/java.rmi.server.RMIClassLoaderSpi 
read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/unittestlib read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/testlibrary read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/lib/tools.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/lib/tools.jar read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/lib/tools.jar read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-policy.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-policy.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-policy.jar read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-lib.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-lib.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-lib.jar read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
access: access allowed (java.net.NetPermission specifyStreamHandler)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-resources.jar read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider.class 
read)
access: access allowed (java.util.PropertyPermission 
java.util.logging.manager read)
access: access allowed (java.lang.RuntimePermission shutdownHooks)
access: access allowed (java.util.logging.LoggingPermission control)
access: access allowed (java.util.PropertyPermission 
java.util.logging.config.class read)
access: access allowed (java.util.PropertyPermission 
java.util.logging.config.file read)
access: access allowed (java.util.PropertyPermission java.home read)
access: access allowed (java.io.FilePermission 
/usr/jdk/instances/jdk1.5.0/jre/lib/logging.properties read)
access: access allowed (java.util.logging.LoggingPermission control)
access: access allowed (java.util.logging.LoggingPermission control)
access: access allowed (java.util.logging.LoggingPermission control)
access: access allowed (java.util.logging.LoggingPermission control)
access: access allowed (java.util.logging.LoggingPermission control)
access: access allowed (java.util.logging.LoggingPermission control)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/com/sun/jini/action/GetPropertyAction.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/com/sun/jini/action/GetPropertyAction.class 
read)
access: access allowed (java.util.logging.LoggingPermission control)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
access: access allowed (java.util.PropertyPermission 
java.rmi.server.codebase read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$1.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$1.class 
read)
access: access allowed (java.lang.RuntimePermission getClassLoader)
access: access allowed (java.lang.reflect.ReflectPermission 
suppressAccessChecks)
access: access allowed (java.lang.RuntimePermission createClassLoader)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$2.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$2.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$LoaderKey.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$LoaderKey.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$3.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$3.class 
read)
access: access allowed (java.lang.RuntimePermission getClassLoader)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$4.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassProvider$4.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassLoader.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassLoader.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/ClassAnnotation.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/ClassAnnotation.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/DownloadPermission.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/DownloadPermission.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassLoader$4.class 
read)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/com/sun/jini/tool/CheckConfigurationFile/net/jini/loader/pref/PreferredClassLoader$4.class 
read)
access: access denied (java.security.SecurityPermission getPolicy)
java.lang.Exception: Stack trace
        at java.lang.Thread.dumpStack(Thread.java:1158)
        at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:253)
        at 
java.security.AccessController.checkPermission(AccessController.java:427)
        at 
java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at java.security.Policy.getPolicy(Policy.java:114)
        at 
net.jini.loader.pref.PreferredClassLoader$4.run(PreferredClassLoader.java:1123)
        at java.security.AccessController.doPrivileged(Native Method)
        at 
net.jini.loader.pref.PreferredClassLoader.getLoaderAccessControlContext(PreferredClassLoader.java:1118)
        at 
net.jini.loader.pref.PreferredClassProvider.createClassLoader(PreferredClassProvider.java:1669)
        at 
net.jini.loader.pref.PreferredClassProvider.lookupLoader(PreferredClassProvider.java:1618)
        at 
net.jini.loader.pref.PreferredClassProvider.loadClass(PreferredClassProvider.java:535)
        at java.rmi.server.RMIClassLoader.loadClass(RMIClassLoader.java:169)
        at TestCheck.main(TestCheck.java:94)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at 
com.sun.javatest.regtest.MainWrapper$MainThread.run(MainWrapper.java:94)
        at java.lang.Thread.run(Thread.java:595)
access: access allowed (java.security.SecurityPermission getPolicy)
access: access allowed (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
access: domain that failed ProtectionDomain  
(file:/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar <no 
signer certificates>)
 sun.misc.Launcher$AppClassLoader@169e11
 <no principals>
 java.security.Permissions@137c60d (
 (java.util.PropertyPermission * read,write)
 (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/com/sun/jini/tool/CheckConfigurationFile/- 
write)
 (java.io.FilePermission <<ALL FILES>> read)
 (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTwork/classes/- read)
 (java.io.FilePermission 
/opt/src/ApacheRiver/trunk/qa/jtreg/JTlib-tmp/jsk-platform.jar read)
 (java.lang.RuntimePermission *)
 (java.lang.RuntimePermission exitVM)
)


java.security.AccessControlException: access denied 
(java.security.SecurityPermission getPolicy)
        at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
        at 
java.security.AccessController.checkPermission(AccessController.java:427)
        at 
java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at java.security.Policy.getPolicy(Policy.java:114)
        at 
net.jini.loader.pref.PreferredClassLoader$4.run(PreferredClassLoader.java:1123)
        at java.security.AccessController.doPrivileged(Native Method)
        at 
net.jini.loader.pref.PreferredClassLoader.getLoaderAccessControlContext(PreferredClassLoader.java:1118)
        at 
net.jini.loader.pref.PreferredClassProvider.createClassLoader(PreferredClassProvider.java:1669)
        at 
net.jini.loader.pref.PreferredClassProvider.lookupLoader(PreferredClassProvider.java:1618)
        at 
net.jini.loader.pref.PreferredClassProvider.loadClass(PreferredClassProvider.java:535)
        at java.rmi.server.RMIClassLoader.loadClass(RMIClassLoader.java:169)
        at TestCheck.main(TestCheck.java:94)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at 
com.sun.javatest.regtest.MainWrapper$MainThread.run(MainWrapper.java:94)
        at java.lang.Thread.run(Thread.java:595)

JavaTest Message: Test threw exception: 
java.security.AccessControlException: access denied 
(java.security.SecurityPermission getPolicy)
JavaTest Message: shutting down test

STATUS:Failed.`main' threw exception: 
java.security.AccessControlException: access denied 
(java.security.SecurityPermission getPolicy)

TEST RESULT: Failed. Execution failed: `main' threw exception: 
java.security.AccessControlException: access denied 
(java.security.SecurityPermission getPolicy)

Re: svn commit: r821473 - in /incubator/river/jtsk/trunk/qa/jtreg: com/sun/jini/action/catchSecurityException/ java/rmi/server/RMIClassLoader/loadProxyClasses/ net/jini/activation/Activatable/activateExceptionTest/ net/jini/activation/Activatable/activateF...

[Peter Firmstone <ji...@zeus.net.au>]

Peter Jones wrote:
>
> On Oct 5, 2009, at 8:56 AM, Peter Firmstone wrote:
>
>> Peter,
>>
>> You don't know where to find all the test.props options?  I want to 
>> make them system properties, using -D
>
> You would need to look for invocations of the TestLibrary method(s) 
> for retrieving values from test.props.
>
> One difficulty with using system properties is ensuring that they are 
> propagated uniformly to child JVMs, which many tests spawn one or more 
> of (for starting Phoenix, for example).  These work with the 
> test.props mechanism because it is found relative to the tests' 
> current working directory, which isn't changed when such JVMs are 
> spawned.
Your right I'm having issues with this.

Any suggestions?  Perhaps it might be easier to create the test.props 
file with an ant target. What do you think?

Cheers,

Peter.

>
> -- Peter
>
>

Re: svn commit: r821473 - in /incubator/river/jtsk/trunk/qa/jtreg: com/sun/jini/action/catchSecurityException/ java/rmi/server/RMIClassLoader/loadProxyClasses/ net/jini/activation/Activatable/activateExceptionTest/ net/jini/activation/Activatable/activateF...

[Peter Jones <pc...@roundroom.net>]

On Oct 5, 2009, at 8:56 AM, Peter Firmstone wrote:

> Peter,
>
> You don't know where to find all the test.props options?  I want to  
> make them system properties, using -D

You would need to look for invocations of the TestLibrary method(s)  
for retrieving values from test.props.

One difficulty with using system properties is ensuring that they are  
propagated uniformly to child JVMs, which many tests spawn one or more  
of (for starting Phoenix, for example).  These work with the  
test.props mechanism because it is found relative to the tests'  
current working directory, which isn't changed when such JVMs are  
spawned.

-- Peter

Re: svn commit: r821473 - in /incubator/river/jtsk/trunk/qa/jtreg: com/sun/jini/action/catchSecurityException/ java/rmi/server/RMIClassLoader/loadProxyClasses/ net/jini/activation/Activatable/activateExceptionTest/ net/jini/activation/Activatable/activateF...

[Peter Firmstone <ji...@zeus.net.au>]

Peter,

You don't know where to find all the test.props options?  I want to make 
them system properties, using -D

Cheers,

Peter.

Re: svn commit: r821473 - in /incubator/river/jtsk/trunk/qa/jtreg: com/sun/jini/action/catchSecurityException/ java/rmi/server/RMIClassLoader/loadProxyClasses/ net/jini/activation/Activatable/activateExceptionTest/ net/jini/activation/Activatable/activateF...

[Peter Jones <pc...@roundroom.net>]

On Oct 4, 2009, at 3:42 AM, peter_firmstone@apache.org wrote:

> Author: peter_firmstone
> Date: Sun Oct  4 07:42:32 2009
> New Revision: 821473
>
> URL: http://svn.apache.org/viewvc?rev=821473&view=rev
> Log:
> Setup build process for jtreg tests.
>
> I've altered the jtreg command and added targets to move the  
> required jar files ( into a temporary directory instead of have to  
> install into the jre extensions directory.

That's a great improvement!

> I've granted AllPermission to jsk-lib.jar, jsk-plaform.jar,  
> jsk.policy.jar, jsk-resources.jar and phoenix-init.jar in all the  
> test policy files.

I'm not sure that I would have added each of those grants individually  
in each test policy file, rather than just a single grant to the whole  
temp directory containing these JAR files (or if you're worried about  
possibly wanting to use this temp directory for other purposes too, a  
subdirectory specifically for JAR files to be granted AllPermission).   
My reasoning would be just in case the set of JAR files to get this  
treatment (i.e. assumption of AllPermission grant) needs to be  
modified in the future for all of these tests (which did happen over  
time as these tests and their infrastructure evolved)-- it would be  
nice to not have to update each of these test security policy files  
again.

I suppose that your approach allows each test to individually control  
the set of JAR files to get this treatment, but that hasn't emerged as  
a requirement for these tests before (evidenced by the fact that the  
existing grant was always to a whole directory, the JRE extensions  
directory).

> In order for these files to get proper AllPermission for full access  
> these jar files will need to be signed in the build process, since  
> they are no longer being accessed from the jre/lib/ext/ directory.
>
> Jonathan could you set up the signing certificates for me please?

I don't understand this-- the AllPermission grants are just to a code  
source, not limited to any particular signers, so they shouldn't need  
to be signed.

-- Peter