java.lang.management
Class ManagementPermission
java.lang.Object
java.security.Permission
java.security.BasicPermission
java.lang.management.ManagementPermission
- All Implemented Interfaces:
- Serializable, Guard
public final class ManagementPermission
- extends BasicPermission
The permission which the SecurityManager will check when code
that is running with a SecurityManager calls methods defined
in the management interface for the Java platform.
The following table
provides a summary description of what the permission allows,
and discusses the risks of granting code the permission.
Permission Target Name |
What the Permission Allows |
Risks of Allowing this Permission |
control |
Ability to control the runtime characteristics of the Java virtual
machine, for example, setting the -verbose:gc and -verbose:class flag,
setting the threshold of a memory pool, and enabling and disabling
the thread contention monitoring support.
|
This allows an attacker to control the runtime characteristics
of the Java virtual machine and cause the system to misbehave.
|
monitor |
Ability to retrieve runtime information about
the Java virtual machine such as thread
stack trace, a list of all loaded class names, and input arguments
to the Java virtual machine. |
This allows malicious code to monitor runtime information and
uncover vulnerabilities. |
Programmers do not normally create ManagementPermission objects directly.
Instead they are created by the security policy code based on reading
the security policy file.
- Since:
- 1.5
- See Also:
BasicPermission
,
Permission
,
Permissions
,
PermissionCollection
,
SecurityManager
,
Serialized Form
ManagementPermission
public ManagementPermission(String name)
- Constructs a ManagementPermission with the specified name.
- Parameters:
name
- Permission name. Must be either "monitor" or "control".
- Throws:
NullPointerException
- if name
is null
.
IllegalArgumentException
- if name
is empty or invalid.
ManagementPermission
public ManagementPermission(String name,
String actions)
throws IllegalArgumentException
- Constructs a new ManagementPermission object.
- Parameters:
name
- Permission name. Must be either "monitor" or "control".actions
- Must be either null or the empty string.
- Throws:
NullPointerException
- if name
is null
.
IllegalArgumentException
- if name
is empty or
if arguments are invalid.
aicas GmbH, Karlsruhe, Germany —www.aicas.com
Copyright © 2001-2015 aicas GmbH. All Rights Reserved.