java - Java RMI：客户端安全策略

Question

grant {
    permission java.security.AllPermission;
};

这行得通。

grant file:///- {
    permission java.security.AllPermission;
};

这不起作用。有人可以向我解释为什么吗？

Answer 1

语法应该是：

授予 codeBase "file:///-" {
   ...
};

请参阅文档。注意分号。

为代码分配权限时要非常小心。

您确定代码库应该是文件 URL（正常用于开发，不适用于生产......）。

Answer 2

The directive "grant { permission }" means grant the permission to all code no matter where it came from. In other words, when there is no codebase specified, the code could be loaded from the network or the file system.

The second directive (if it worked) would only apply to the local file system. It would be specifying all files (recursively) on the local file system. I'm not sure that "file:///" is a valid URL by itself. I know that file:///tmp/- works.