policy : Java Glossary

Totally Permission Policy File

// Do what you will. Totally permissive policy file.
grant {
permission java.security.AllPermission;
};

Applet Control

Default

codebase

The exact meaning of a codebase value depends on the characters at the end.

Where are the policy files?

The default is to have:

1. a single system-wide policy file C:\Program Files\java\jre1.8.0_131\ \lib\security\java.policy in the {$java.home}\lib\security\java.policy directory. e.g.
   C:\Program Files\Java\jre7\lib\security\java.policy
   C:\Program Files\Java\jre7\lib\security\javaws.policy
   C:\Program Files (x86)\Java\jre7\lib\security\java.policy
   C:\Program Files (x86)\Java\jre7\lib\security\javaws.policy
2. a user-specific policy file user.home/.java.policy, (note the lead dot) e.g. "C:\Documents and Settings\ user\.java.policy". In Vista, W2008, W7-32, W7-64, W8-32, W8-64, W2012, W10-32 and W10-64 look in C:\Users\user\.java.policy.

The entries in C:\Program Files\java\jre1.8.0_131\ \lib\security\java.security/java.policy tell Java where to find your policy files. They look like this:

Then make sure the corresponding java.security file points to your {$java.home}\lib\security\java.policy and user.home\.java.policy files.

If you have Take Command, you can find the java.policy and .java.policy files with dir /bs *.policy

Will The Real Policy File Please Stand Up.

Summarising: to find out which policy file(s) your browser is using, run wassup and look for the restricted system property java.security.policy. By default Wassup shows only safe properties. Remember to change the selection to include restricted prosperities. If there is no such property, look for java.home. Use that to find lib\java.security. Use that to find the system java.policy and user .java.policy files.

Recovery

If you accidentally delete your java.policy or .java.policy file, Java may go nuts, refusing to give permission for anything. All certificates will be rejected. You can recreate it to look like the default displayed above.

Disadvantages

There are three problems with editing the policy file to grant your applet permission:

• Your computer may have a dozen policy files. You have to make sure you edit the correct one.
• You can’t very well ask others to fiddle their policy files. Most users don’t even know what a file or text editor is. If you have trouble deciding which is the real policy file, imagine the trouble naïve users will have.
• Others in corporate environments are not permitted to modify their policy files. That is the sole responsibility of the IT (Information Technology) department.

Learning More