Previous Topic

Next Topic

Book Contents

Book Index

Security properties

This section lists the system properties that you can use to tune framework security.

System property

Default value

Description

mbs.sm

false

Turns on (when true) and off (when false) the Security Manager (see "Framework Architecture").

mbs.security

Activates the security in the framework. This property has three possible values:

  • none - Security is off. For VMs that do not support the JDK 1.2 or CDC Foundation 1.1 security model, the property must have this value.
  • jdk12 - Security that implements the JDK 1.2 security model is on. Has meaning only if the Security Manager is active (mbs.sm is equal to true)
  • custom - Custom Security module should be used, whose implementation is specified with the mbs.security.class system property. Has meaning only if the Security Manager is active (mbs.sm is equal to true)

If the jdk12 security models is on, you should specify a policy file. For example in the server executable script:

java -Djava.security.policy=current.policy

mbs.security.fileaccess

false

Turns on/off automatic assignment of ExclusiveFilePermissions to bundles for writing data outside the persistent storage.

mbs.disableLocalPermissions

false

If true, disables the analysis and processing of bundle local permissions.

mbs.policy.crypt

false

If true, enables the encryption of the Conditional Permissions registered by the ConditionalPermissionAdmin service.