Cloud CM-IPMP Instrukcja Naprawy Pobierz pdf (Strona 98)

Nb. This conﬁguration ﬁle is subject to the variable substitution applied to conﬁguration ﬁles (replacement of

@RHINO_HOME@

, etc).

The conﬁguration ﬁle is a standard Java security policy ﬁle.

For more information regarding Sun Java security policy documentation at please visit

http://java.sun.com/j2se/1.4.1/docs/guide/security/PolicyFiles.html

In some cases, it may be convenient to completely disable the security policy instead of granting the necessary permissions

individually. There are two alternative methods:

1. Insert a rule into the policy ﬁle granting AllPermission to all code:

grant {

permission java.security.AllPermission;

};

2. Disable the use of a security manager by editing

$RHINO_NODE_HOME/read-config-variables

and commenting out the

line:

#OPTIONS="$OPTIONS -Djava.security.manager"

Note that making either of these changes will greatly reduce the security of the container environment. This should only be

done on systems that run in a trusted network environment (for example, behind a ﬁrewall), and only trusted code should be

installed and used.

The SecurityManager can be conﬁgured to produce trace logs by editing

$RHINO_NODE_HOME/read-config-variables

and

adding the line:

OPTIONS="$OPTIONS -Djava.security.debug=access;failure"

Note: This OPTION will produce a lot of console output. It is recommended to

start-rhino.sh > out 2>&1

capture output.

15.3 Network Connections

Network connections to and from remote machines are also protected by the standard Java Security Manager.

To enable unrestricted access to networking resources such as the hosts ﬁle add the line(s) below to the

$RHINO_HOME//etc/defauls/config/rhino.policy

ﬁle.

grant {

java.net.SocketPermission "*","connect,accept,resolve";

java.io.FilePermission "*","read,write,delete";

};

To allow remote host to connect to the JMX Remote Adaptor and the Web Console locate the

$RHINO_HOME/etc/defaults/

config/mlet.conf

ﬁle.

Open Cloud Rhino 1.4.3 Administration Manual v1.1 89

1 2 ... 93 94 95 96 97 98 99 100 101 102 103 ... 200 201

Brak uwag

Cloud CM-IPMP Instrukcja Naprawy Strona 98