Block shutdownHooks and setIO in DAC/miscellaneous by default

MeGysssTaa · Jun 20, 2020 · 999886c · 999886c
1 parent a17e375
commit 999886c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/main/resources/config/runtimeprotect.yml b/src/main/resources/config/runtimeprotect.yml
@@ -344,7 +344,11 @@ domain_access_control:
       - DENY ALL createClassLoader
       - DENY ALL setContextClassLoader
       - DENY ALL enableContextClassLoaderOverride
+      - DENY ALL closeClassLoader
       - DENY ALL setSecurityManager
+      - DENY ALL createSecurityManager
+      - DENY ALL shutdownHooks
+      - DENY ALL setIO
       - DENY ALL usePolicy
       - DENY ALL setDefaultAuthenticator
       - DENY ALL requestPasswordAuthentication