How do I set the security.policy file for a specific application from within NetBeans?

Question

I am having a bit of trouble -- a lot actually -- trying to figure out how get NetBeans to read my policy file for a particular application. Please take a look at the below code:

      public static void main(final String[] args)
      {
          System.setSecurityManager(new SecurityManager());
          System.setProperty("java.security.policy","file:/C:/Users/kBPersonal/Documents/NetBeansProjects/JAASTest/JAASTest.policy");

          EventQueue.invokeLater(new Runnable()
          {
              public void run()
              {
                  JFrame frame = new JAASFrame();
                  frame.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE);
                  frame.setVisible(true);
              }
          });
      }

No matter what I do I keep getting the following error which lets me know that NetBeans is not reading my security.policy file (I even added it's location to the main security.policy file in the C:\Program Files (x86)\Java\jre6\lib\security\java.security). Incidentally, line 20 is where I try to set the System.setProperty("java.security.policy, ...)

     Exception in thread "main" java.security.AccessControlException: access denied (java.util.PropertyPermission java.security.policy write)
     at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
     at java.security.AccessController.checkPermission(AccessController.java:546)
     at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
     at java.lang.System.setProperty(System.java:725)
     at JAASTest.main(JAASTest.java:20)

Any and all help is greatly appreciated!

Parisian

Answer 1

The easiest way to set a specific security policy is via a runtime argument. For example, this is what we do here for the same problem:

1. Open "Project Properties -> Run"
2. Select your runtime configuration
3. Edit the "VM Options" for the runtime configuration

4. Add the following:

   -Djava.security.manager -Djava.security.policy=src/dir1/dir2/important.policy

where you src/dir1/dir2/important.policy would be changed in your example to point at your file JAASTest.policy.

Revanche

When I do that it generates a slightly different error message : Exception in thread "main" java.security.AccessControlException: access denied (java.lang.RuntimePermission createSecurityManager) at java.security.AccessControlContext.checkPermission (AccessControlContext.java:323) at java.security.AccessController.checkPermission(AccessController.java:546) at java.lang.SecurityManager.checkPermission(SecurityManager.java:532) at java.lang.SecurityManager.<init>(SecurityManager.java:282) at JAASTest.main(JAASTest.java:19) – Parisian

Apparently, now it doesnt like my Security Manager declaration? Go figure :) – Parisian

You know what, once I removed the line: System.setProperty("java.security.policy","file:/C:/Users/kBPersonal/Documents/NetBeansProjects/JAASTest/JAASTest.policy"); it is at least reading my JAASTest.policy file and my Frame comes up. I think trying to figure out why it is still not giving me the access I need is the subject of another question! Thanks Bob! – Parisian

Answer 2

If you're using the System.setProperty() method to add your policy file, then make sure it's before you create the SecurityManager. I've used SecurityManager before with the System.setProperty() method, and calling it before I create the SecurityManager generally works.

Packsaddle

is there any way that we can check whether the given policy file is taken by the security manager, or how do we make sure that the given policy file is been taken in to consideration by the security manager – Maddeu

On my setup (openjdk 13.0.1), I had to call Policy.getPolicy().refresh() after the setProperty for it to be taken into account – Imprecation

Thanks Benoit, that fixed my problem also. – Venosity

Answer 3

Add security policy before setting your system security manager.

according to your given code first add

System.setProperty("java.security.policy","file:/C:/Users/kBPersonal/Documents/NetBeansProjects/JAASTest/JAASTest.policy");

then

System.setSecurityManager(new SecurityManager());

Imaginative

is there any way that we can check whether the given policy file is taken by the security manager, or how do we make sure that the given policy file is been taken in to consideration by the security manager – Maddeu

You can check the system property by the key java.security.policy and see if it set or not. If not set then you get null. Follow this line String prop = System.getProperty("java.security.policy"); – Imaginative

On my setup (openjdk 13.0.1), I had to call Policy.getPolicy().refresh() after the setProperty for it to be taken into account – Imprecation

Answer 4

Although it's not ideal and it's not a definitive solution, running "rmiregistry &" from the location where your .class files reside, would solve this issue.

Lamartine