Update was.policy for WAS9 (frankframework#2063)

lenardvandermaas · Jul 26, 2021 · f5e0937 · f5e0937
1 parent 3180d3e
commit f5e0937
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ear/src/main/application/META-INF/was.policy b/ear/src/main/application/META-INF/was.policy
@@ -37,6 +37,8 @@ permission java.io.FilePermission "${was.install.root}${/}profiles${/}${current.
 //permission java.io.FilePermission "${was.install.root}${/}profiles${/}${current.node.name}${/}config${/}cells${/}${current.cell.name}${/}applications${/}${APPLICATION_NAME}.ear${/}deployments${/}${APPLICATION_NAME}${/}META-INF${/}ibm-application-bnd.xmi", "read";
 // required to read the resources.xml from within the Ibis Console
 permission java.io.FilePermission "${was.install.root}${/}profiles${/}${current.node.name}${/}config${/}cells${/}${current.cell.name}${/}nodes${/}${current.node.name}${/}servers${/}${current.server.name}${/}resources.xml", "read";
+// required to read the maximum Transaction Timeout
+permission java.io.FilePermission "${was.install.root}${/}profiles${/}${current.node.name}${/}config${/}cells${/}${current.cell.name}${/}nodes${/}${current.node.name}${/}servers${/}${current.server.name}${/}server.xml", "read";
 
 permission java.util.logging.LoggingPermission "control";
 
@@ -59,6 +61,7 @@ permission java.net.SocketPermission "*", "connect,resolve";
 // Needed for MAIL
 permission java.io.FilePermission "${user.home}${/}.mailcap", "read";
 permission java.io.FilePermission "${was.install.root}${/}java${/}jre${/}lib${/}mailcap", "read";
+permission java.io.FilePermission "${java.home}${/}conf", "read";
 
 // property * write required for Quartz scheduler and SpringFramework,
 // as they call java.System.getProperties()
@@ -95,6 +98,7 @@ permission java.lang.RuntimePermission "accessClassInPackage.com.ibm.oti.shared"
 permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.dynalink.support";
 permission java.lang.RuntimePermission "accessClassInPackage.jdk.nashorn.internal.runtime";
 permission java.lang.RuntimePermission "accessClassInPackage.jdk.nashorn.internal.runtime.*";
+permission java.util.PropertyPermission "com.ibm.websphere.security.dumpJaasConfig" "read";
 
 // required for MS SQL:
 permission java.lang.RuntimePermission "accessClassInPackage.sun.jdbc.odbc";