dev@glassfish.java.net

Re: Location of server.policy in V3 workspace ?

From: V B Kumar Jayanti <Vbkumar.Jayanti_at_Sun.COM>
Date: Tue, 19 Aug 2008 15:36:02 +0530

Kedar Mhaswade wrote:

>
>
> V B Kumar Jayanti wrote:
>
>> I need to update server.policy file in V3 to handle issue :
>> https://glassfish.dev.java.net/issues/show_bug.cgi?id=5493 , but i
>> see two sets of server.policy files with slightly different content
>> at :
>>
>> distributions/nucleus-base/domains/domain1/config/server.policy
>> distributions/nucleus-base/lib/templates/server.policy
>>
>> So which is the one that really gets used (do i need to update both
>> of them ?).
>
> Both are used, at the moment. Eventually we will resort to one.
> Please change both of them. One is required in zip based installation and
> other is used at the time of create-domain.
>
Ok, i will change both,

 but does anyone know why the two copies as they exist today are not
identical. Here is the diff :
bash-3.2$ diff -w
v3/distributions/nucleus-base/domains/domain1/config/server.policy
v3/distributions/ nucleus-base/lib/templates/server.policy
60,64d59
< // Composite applications get all permissions by default
< grant codeBase
"file:${com.sun.aas.instanceRoot}/applications/composite-applic
ations/-" {
< permission java.security.AllPermission;
< };


> Also, can you please help clean it up as well. Most of the things are
> probably not relevant for v3.
>
Yes we need to clean it up, but i guess i would not aim for a complete
cleanup for Prelude. For example i am not sure if some of the grants
that currently seem irrelevant in V3 Prelude (WebTier) will become
relevant for the Full GlassFish V3 installation. For example i see the
following grants for JBI classes but i see no "jbi" directory under
installRoot in V3 Prelude.


// JBI get all permissions by default
grant codeBase "file:${com.sun.aas.installRoot}/jbi/-" {
    permission java.security.AllPermission;
};

regards,
kumar

> -Kedar
>
>>
>> thanks,
>> kumar
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: dev-help_at_glassfish.dev.java.net
>