java.lang.management
public final class: ManagementPermission [javadoc |
source]
java.lang.Object
java.security.Permission
java.security.BasicPermission
java.lang.management.ManagementPermission
All Implemented Interfaces:
Serializable, Guard
The permission which the SecurityManager will check when code
that is running with a SecurityManager calls methods defined
in the management interface for the Java platform.
The following table
provides a summary description of what the permission allows,
and discusses the risks of granting code the permission.
| Permission Target Name |
What the Permission Allows |
Risks of Allowing this Permission |
| control |
Ability to control the runtime characteristics of the Java virtual
machine, for example, setting the -verbose:gc and -verbose:class flag,
setting the threshold of a memory pool, and enabling and disabling
the thread contention monitoring support.
|
This allows an attacker to control the runtime characteristics
of the Java virtual machine and cause the system to misbehave.
|
| monitor |
Ability to retrieve runtime information about
the Java virtual machine such as thread
stack trace, a list of all loaded class names, and input arguments
to the Java virtual machine. |
This allows malicious code to monitor runtime information and
uncover vulnerabilities. |
Programmers do not normally create ManagementPermission objects directly.
Instead they are created by the security policy code based on reading
the security policy file.
| Constructor: |
public ManagementPermission(String name) {
super(name);
if (!name.equals("control") && !name.equals("monitor")) {
throw new IllegalArgumentException("name: " + name);
}
}
Constructs a ManagementPermission with the specified name. Parameters:
name - Permission name. Must be either "monitor" or "control".
Throws:
NullPointerException - if name is null.
IllegalArgumentException - if name is empty or invalid.
|
public ManagementPermission(String name,
String actions) throws IllegalArgumentException {
super(name);
if (!name.equals("control") && !name.equals("monitor")) {
throw new IllegalArgumentException("name: " + name);
}
if (actions != null && actions.length() > 0) {
throw new IllegalArgumentException("actions: " + actions);
}
}
Constructs a new ManagementPermission object. Parameters:
name - Permission name. Must be either "monitor" or "control".
actions - Must be either null or the empty string.
Throws:
NullPointerException - if name is null.
IllegalArgumentException - if name is empty or
if arguments are invalid.
|
| Methods from java.lang.Object: |
|---|
|
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |