我期望,当使用 System.setSecurityManager()策略文件时,它应该工作。
在这里,我有一个 intelliJ 项目,其结构为 file/directory:
--src
--main
--java
--TestPrinciple.java
--resources
--demo.policy
然后我的代码:
public class TestPrincipal {
public static void main(String[] args) {
System.setProperty("java.security.policy", "demo.policy");
System.setProperty("java.security.auth.login.config", "demo.config");
System.out.println(System.getProperty("java.home"));
System.setSecurityManager(new SecurityManager());
}
}
虽然 demo.policy 是:
grant {
permission java.util.PropertyPermission "java.home", "read";
};
它运行异常:
Exception in thread "main" java.security.AccessControlException: access denied ("java.util.PropertyPermission" "java.security.policy" "write")
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
at java.security.AccessController.checkPermission(AccessController.java:884)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
at java.lang.System.setProperty(System.java:792)
at TestPrincipal.main(TestPrincipal.java:6)