(Conditional)PermissionAdmin status

[Costin Leau <co...@gmail.com>]

Hi everyone,

I've noticed in the trunk under framework.security implementations for 
CPA/PA however these are not included in the official distribution.
Does anybody know what's their status and ETA?

Thanks,
-- 
Costin

Re: (Conditional)PermissionAdmin status

[Karl Pauls <ka...@gmail.com>]

> Hi everyone,
>
> I've noticed in the trunk under framework.security implementations for
> CPA/PA however these are not included in the official distribution.
> Does anybody know what's their status and ETA?

They work with Felix 1.0.4. However, I didn't find the time to make
sure we have all checks implemented inside the framework. We should
have most but certainly not all. Furthermore, I need to port them to
the current trunk because we made some internal api changes (I will
update the pom to depend on felix 1.0.4 for now).

My goal is to get back to security when we have Felix 1.2 out of the
door. The first steps probably need to be to create some
documentation, port to 1.2, and make sure we have all checks in place.
Then I think it should be ready for a release. For now, you would have
to install the bundle in a framework with security enabled and
AllPermission granted:

$ java -Djava.security.manager -Djava.security.policy=all.policy -jar
bin/felix.jar
-> install file:org.apache.felix.framework.security-0.9.0-SNAPSHOT.jar
-> services
System Bundle (0) provides:
---------------------------
org.osgi.service.startlevel.StartLevel
org.osgi.service.packageadmin.PackageAdmin
org.osgi.service.permissionadmin.PermissionAdmin
org.osgi.service.condpermadmin.ConditionalPermissionAdmin

Additionally, you can give a keystore for the trusted root
certificates like this:

-Dfelix.keystore=trusted.ks -Dfelix.keystore.pass=changeit
-Dfelix.keystore.type=JKS

Hope this helps.

regards,

Karl

> Thanks,
> --
> Costin
>
>



-- 
Karl Pauls
karlpauls@gmail.com