| java.lang.Object
 java.security.Permission
org.tanukisoftware.wrapper.security.WrapperServicePermission
| WrapperServicePermission | | public class WrapperServicePermission extends Permission (Code) | | WrapperServicePermissions are used to grant the right to start, stop,
pause, continue, interrogate, or send custom codes to other services
running on a Windows system.
These permissions are inherently quite dangerous so great care should be
taken when granting them. When doing so, try to only grant permission to
those services which really need to be controlled.
The following are examples of how to specify the permission within a policy
file.
grant codeBase "file:../lib/-" {
// Grant various permissions to a specific service.
permission org.tanukisoftware.wrapper.security.WrapperServicePermission "myservice", "interrogate";
permission org.tanukisoftware.wrapper.security.WrapperServicePermission "myservice", "interrogate,start,stop";
permission org.tanukisoftware.wrapper.security.WrapperServicePermission "myservice", "userCode";
permission org.tanukisoftware.wrapper.security.WrapperServicePermission "myservice", "*";
// Grant various permissions to any service starting with "my".
permission org.tanukisoftware.wrapper.security.WrapperServicePermission "my*", "*";
// Let the calling code do anything to any service on the system
permission org.tanukisoftware.wrapper.security.WrapperServicePermission "*", "*";
permission org.tanukisoftware.wrapper.security.WrapperServicePermission "*";
};
Possible actions include the following:
| Permission Action Name |
What the Permission Allows |
Risks of Allowing this Permission |
| start |
Start a service which is installed but has not been started. |
Malicious code could potentially start any service that is not currently running.
This includes services which were previously stopped or that are configured to be
started manually. Many Windows systems have several services stopped by default
because of the security hazards that they pose. Starting such services could open
the system up to attacks related to that service. |
| stop |
Stop a service which is currently running. |
Malicious code could potentially stop running service. This could result in a
denial of service attack if the service is a web or database server. Or it
result in more dangerous attacks if the service is a firewall or virus scanner.
|
| pause |
Pause a service which is currently running. |
Malicious code could potentially pause running service. This could result in a
denial of service attack if the service is a web or database server. Or it
result in more dangerous attacks if the service is a firewall or virus scanner.
|
| continue |
Continue a service which was previously paused. |
Malicious code could resume services which had been paused for a good reason. |
| interrogate |
Interrogate a service as to its current state. |
Malicious code learn a lot about a system and its weakness by probing which
services are currently running. |
| userCode |
Send any custom user code to a service. |
The danger of this action depends on whether or not the service understands
custom user codes, and what it does with them. This could potentially be a
very dangerous permission to grant. |
author:
Leif Mortenson |
| Method Summary | |
| public boolean | equals(Object obj)
Checks two Permission objects for equality. | | int | getActionMask()
Returns the action mask of the Permission. | | public String | getActions()
Return the canonical string representation of the actions.
Always returns present actions in the following order:
start, stop, pause, continue, interrogate. | | public int | hashCode()
Returns the hash code value for this object. | | public boolean | implies(Permission p2)
Checks if this WrapperServicePermission object "implies" the
specified permission.
More specifically, this method returns true if:
- p2 is an instanceof FilePermission,
- p2's actions are a proper subset of this object's actions,
and
- p2's service name is implied by this object's service name.
For example, "MyApp*" implies "MyApp".
Parameters:
p2 - the permission to check against. | | boolean | impliesIgnoreActionMask(WrapperServicePermission p2)
Tests whether this permissions implies another without taking the
action mask into account. | | public PermissionCollection | newPermissionCollection()
Returns an custom WSCollection implementation of a PermissionCollection. |
| ACTION_INTERROGATE | | public static String ACTION_INTERROGATE(Code) | | |
| WrapperServicePermission | | public WrapperServicePermission(String serviceName, String actions)(Code) | | Creates a new WrapperServicePermission for the specified service.
Parameters:
serviceName - The name of the service whose access is beingcontrolled.
Parameters:
actions - The action or actions to be performed. |
| WrapperServicePermission | | public WrapperServicePermission(String serviceName)(Code) | | Creates a new WrapperServicePermission for the specified service.
This version of the constructor grants all actions.
Parameters:
serviceName - The name of the service whose access is beingcontrolled. |
| equals | | public boolean equals(Object obj)(Code) | | Checks two Permission objects for equality.
Do not use the equals method for making access control decisions; use
the implies method.
Parameters:
obj - The object we are testing for equality with this object. True if both Permission objects are equivalent. |
| getActionMask | | int getActionMask()(Code) | | Returns the action mask of the Permission.
|
| getActions | | public String getActions()(Code) | | Return the canonical string representation of the actions.
Always returns present actions in the following order:
start, stop, pause, continue, interrogate. userCode.
the canonical string representation of the actions. |
| hashCode | | public int hashCode()(Code) | | Returns the hash code value for this object.
A hash code value for this object. |
| implies | | public boolean implies(Permission p2)(Code) | | Checks if this WrapperServicePermission object "implies" the
specified permission.
More specifically, this method returns true if:
- p2 is an instanceof FilePermission,
- p2's actions are a proper subset of this object's actions,
and
- p2's service name is implied by this object's service name.
For example, "MyApp*" implies "MyApp".
Parameters:
p2 - the permission to check against. true if the specified permission is implied by this object, |
| impliesIgnoreActionMask | | boolean impliesIgnoreActionMask(WrapperServicePermission p2)(Code) | | Tests whether this permissions implies another without taking the
action mask into account.
|
| newPermissionCollection | | public PermissionCollection newPermissionCollection()(Code) | | Returns an custom WSCollection implementation of a PermissionCollection.
|
|
|