Home/ Questions/Q 8430941
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-10T05:43:20+00:00

I don’t want to modify anything in my java home directory, however, I am

  • 0

I don’t want to modify anything in my java home directory, however, I am afraid that sometimes my default java.policy file may be too permissive. Is there a way for me to use a specified policy file as the only policy file when I run java with the -Djava.security.manager option?

If I add a -Djava.security.policy=myPolicy.policy option, it uses my policy file in addition to the default policy file — which is bad because it looks like all permissions granted in the default policy file is still granted.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    A Common Mistake with Java SecurityManager:

    • To run with SecurityManager and default Java security policy, which
      is $JAVA_HOME/jre/lib/security/java.policy:

      java -Djava.security.manager Main

    • To run with SecurityManager and
      only your custom security policy (ignoring default java security
      policy):

      java -Djava.security.manager -Djava.security.policy==security.policy Main

    • To run with SecurityManager and default java security policy
      first, then your custom security policy:

      java -Djava.security.manager -Djava.security.policy=security.policy Main

    • If you don’t want a SecurityManager, then simply leave out
      java.security.policy to avoid any confusion.

    • 0