Restrict File Permissions in user.dir. See #133

metafacture · Sep 27, 2023 · 330eff0 · 330eff0
1 parent 2bfd4dc
commit 330eff0
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/resources/.java.policy_move_to_home_dir b/resources/.java.policy_move_to_home_dir
@@ -48,9 +48,17 @@ grant {
 
         // permissions for metafacture playground
 
-        permission java.io.FilePermission "${user.dir}/-", "write, read, delete";
+        permission java.io.FilePermission "schemata/metamorph.xsd", "read";
+        permission java.io.FilePermission "morph-functions.properties", "read";
+        permission java.io.FilePermission "morph-collectors.properties", "read";
+        permission java.io.FilePermission "morph-maps.properties", "read";
+
+        permission java.io.FilePermission "${user.dir}/project.clj", "read";
+        permission java.io.FilePermission "${user.dir}/resources/-", "read";
+        permission java.io.FilePermission "${user.dir}/tmp", "write, read, delete";
+        permission java.io.FilePermission "${user.dir}/tmp/-", "write, read, delete";
         permission java.io.FilePermission "${java.io.tmpdir}/-", "write, read, delete";
-        permission java.io.FilePermission "${user.home}/-", "read";
+        permission java.io.FilePermission "${user.home}/.m2/-", "read";
 
         // Please adapt these paths to all parent paths of your user home directory
         // Some Fix Code searches a .project file to determine an encoding