java.lang.Object
java.security.Permission
java.security.BasicPermission
com.sun.tools.attach.AttachPermission
- All Implemented Interfaces:
Serializable
,Guard
When a
SecurityManager
set, this
is the permission which will be checked when code invokes VirtualMachine.attach
to attach to a target virtual
machine.
This permission is also checked when an AttachProvider
is created.
An AttachPermission
object contains a name (also referred
to as a "target name") but no actions list; you either have the
named permission or you don't.
The following table provides a summary description of what the
permission allows, and discusses the risks of granting code the
permission.
Permission Target Name | What the Permission Allows | Risks of Allowing this Permission |
---|---|---|
attachVirtualMachine | Ability to attach to another Java virtual machine and load agents into that VM. | This allows an attacker to control the target VM which can potentially cause it to misbehave. |
createAttachProvider | Ability to create an AttachProvider instance.
|
This allows an attacker to create an AttachProvider which can potentially be used to attach to other Java virtual machines. |
Programmers do not normally create AttachPermission objects directly. Instead they are created by the security policy code based on reading the security policy file.
- See Also:
-
Constructor Summary
ConstructorDescriptionAttachPermission
(String name) Constructs a new AttachPermission object.AttachPermission
(String name, String actions) Constructs a new AttachPermission object. -
Method Summary
Methods declared in class java.security.BasicPermission
equals, getActions, hashCode, implies, newPermissionCollection
Methods declared in class java.security.Permission
checkGuard, getName, toString
-
Constructor Details
-
AttachPermission
Constructs a new AttachPermission object.- Parameters:
name
- Permission name. Must be either "attachVirtualMachine", or "createAttachProvider".- Throws:
NullPointerException
- if name isnull
.IllegalArgumentException
- if the name is invalid.
-
AttachPermission
Constructs a new AttachPermission object.- Parameters:
name
- Permission name. Must be either "attachVirtualMachine", or "createAttachProvider".actions
- Not used and should benull
, or the empty string.- Throws:
NullPointerException
- if name isnull
.IllegalArgumentException
- if arguments are invalid.
-