文件名称:Java.PrivilegedCode
- 所属分类：
- JSP源码/Java
- 资源属性：
- [Java] [源码]
- 上传时间：
- 2012-11-26
- 文件大小：
- 2kb
- 下载次数：
- 0次
- 提 供 者：
- n**
- 相关连接：
- 无
- 下载说明：
- 别用迅雷下载，失败请重下，重下不扣分！
介绍说明－－下载内容均来自于网络，请自行研究使用
Privileged code in Java is a "all-or-nothing" proposition. While it does allow a normal user
to execute some operations that would notmally require granting higher privileges (like viewing
files in his particular directory), it may have a side-effect of exposing undesired operations,
which can open up a security hole in the system.
An explanation of the example:
1. Operations class contains file-related methods - listing of all files and deleting a file
2. PrivilegedCode class is a privileged wrapper around those operations
3. Both of those classes are combined into a single jar, which is granted high level of trust
4. Normally, any file operations require granting a special permission, so an attempt to directly execute calls on Operations class by an untrusted client fails
5. However, when the same untrusted client executes the same operations through the privileged interface, it succeeds, including deleting an arbitrary file passed on command line-Privileged code in Java is a "all-or-nothing" proposition. While it does allow a normal user
to execute some operations that would notmally require granting higher privileges (like viewing
files in his particular directory), it may have a side-effect of exposing undesired operations,
which can open up a security hole in the system.
An explanation of the example:
1. Operations class contains file-related methods- listing of all files and deleting a file
2. PrivilegedCode class is a privileged wrapper around those operations
3. Both of those classes are combined into a single jar, which is granted high level of trust
4. Normally, any file operations require granting a special permission, so an attempt to directly execute calls on Operations class by an untrusted client fails
5. However, when the same untrusted client executes the same operations through the privileged interface, it succeeds, including deleting an arbitrary file passed on command line
to execute some operations that would notmally require granting higher privileges (like viewing
files in his particular directory), it may have a side-effect of exposing undesired operations,
which can open up a security hole in the system.
An explanation of the example:
1. Operations class contains file-related methods - listing of all files and deleting a file
2. PrivilegedCode class is a privileged wrapper around those operations
3. Both of those classes are combined into a single jar, which is granted high level of trust
4. Normally, any file operations require granting a special permission, so an attempt to directly execute calls on Operations class by an untrusted client fails
5. However, when the same untrusted client executes the same operations through the privileged interface, it succeeds, including deleting an arbitrary file passed on command line-Privileged code in Java is a "all-or-nothing" proposition. While it does allow a normal user
to execute some operations that would notmally require granting higher privileges (like viewing
files in his particular directory), it may have a side-effect of exposing undesired operations,
which can open up a security hole in the system.
An explanation of the example:
1. Operations class contains file-related methods- listing of all files and deleting a file
2. PrivilegedCode class is a privileged wrapper around those operations
3. Both of those classes are combined into a single jar, which is granted high level of trust
4. Normally, any file operations require granting a special permission, so an attempt to directly execute calls on Operations class by an untrusted client fails
5. However, when the same untrusted client executes the same operations through the privileged interface, it succeeds, including deleting an arbitrary file passed on command line
(系统自动生成,下载前可以参看下载内容)
下载文件列表
access.policy
Customer.java
execute.bat
Java.III.PrivilegedCode.txt
Operations.java
PrivilegedCode.java
Customer.java
execute.bat
Java.III.PrivilegedCode.txt
Operations.java
PrivilegedCode.java