org.apache.river.tool

Class ProfilingSecurityManager

java.lang.Object

java.lang.SecurityManager

org.apache.river.tool.ProfilingSecurityManager

public class ProfilingSecurityManager
extends SecurityManager

ProfilingSecurityManager is a Java security manager that profiles what resources an application accesses, and in what manner --- e.g., read, write, etc. It does not enforce a security policy, but rather produces a starting point for crafting one.

It extends java.lang.SecurityManager and overrides the two forms of the checkPermission() method. For each call to checkPermission(), ProfilingSecurityManager first guards against the condition that it itself induced the call to checkPermission(), which would result in unterminated recursion. If a call to checkPermission() resulted from a call outside ProfilingSecurityManager, the current context is examined and each class found therein is profiled as needing access to the java.security.Permission in question. Profiling is manifested as a writing to System.out a "grant" rule for each java.security.Permission requested on a per CodeBase basis. The implementation here does some very simple rule caching. If a rule has been seen previously, it is not output to System.out. The caching cannot prevent a security check, but it can reduce I/O during profiling.

Author:

Mark S. Petrovic

Field Summary

Fields inherited from class java.lang.SecurityManager

inCheck

Constructor Summary

Constructors

Constructor and Description
ProfilingSecurityManager()

Method Summary

Modifier and Type	Method and Description
void	checkPermission(Permission permission)
void	checkPermission(Permission permission, Object context)
String	toString()

Methods inherited from class java.lang.SecurityManager

checkAccept, checkAccess, checkAccess, checkAwtEventQueueAccess, checkConnect, checkConnect, checkCreateClassLoader, checkDelete, checkExec, checkExit, checkLink, checkListen, checkMemberAccess, checkMulticast, checkMulticast, checkPackageAccess, checkPackageDefinition, checkPrintJobAccess, checkPropertiesAccess, checkPropertyAccess, checkRead, checkRead, checkRead, checkSecurityAccess, checkSetFactory, checkSystemClipboardAccess, checkTopLevelWindow, checkWrite, checkWrite, classDepth, classLoaderDepth, currentClassLoader, currentLoadedClass, getClassContext, getInCheck, getSecurityContext, getThreadGroup, inClass, inClassLoader

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

ProfilingSecurityManager

public ProfilingSecurityManager()

Method Detail

checkPermission

public void checkPermission(Permission permission)

Overrides:

checkPermission in class SecurityManager

checkPermission

public void checkPermission(Permission permission,
                            Object context)

Overrides:

checkPermission in class SecurityManager

toString

public String toString()

Overrides:

toString in class Object