2.3. Run JBoss EAP 6 Within the Java Security Manager

Procedure 2.1. Configure the Security Manager for JBoss EAP 6

1. Open the configuration file.

   Open the configuration file for editing. This file is located in one of two places, depending on whether you use a managed domain or standalone server. This is not the executable file used to start the server or domain.

   • Managed Domain

     • For Linux: EAP_HOME/bin/domain.conf
     • For Windows: EAP_HOME\bin\domain.conf.bat

   • Standalone Server

     • For Linux: EAP_HOME/bin/standalone.conf
     • For Windows: EAP_HOME\bin\standalone.conf.bat

2. Add the Java options to the file.

   To ensure the Java options are used, add them to the code block that begins with:

   if [ "x$JAVA_OPTS" = "x" ]; then
   

   You can modify the -Djava.security.policy value to specify the exact location of your security policy. It should go onto one line only, with no line break. Using == when setting the -Djava.security.policy property specifies that the security manager will use only the specified policy file. Using = specifies that the security manager will use the specified policy combined with the policy set in the policy.url section of JAVA_HOME/lib/security/java.security.

   Important

   JBoss Enterprise Application Platform releases from 6.2.2 onwards require that the system property jboss.modules.policy-permissions is set to true.

   Example 2.1. domain.conf

   JAVA_OPTS="$JAVA_OPTS -Djava.security.manager -Djava.security.policy==$PWD/server.policy -Djboss.home.dir=/path/to/EAP_HOME -Djboss.modules.policy-permissions=true"

   Example 2.2. domain.conf.bat

   set "JAVA_OPTS=%JAVA_OPTS% -Djava.security.manager -Djava.security.policy==\path\to\server.policy -Djboss.home.dir=\path\to\EAP_HOME -Djboss.modules.policy-permissions=true"

   Example 2.3. standalone.conf

   JAVA_OPTS="$JAVA_OPTS -Djava.security.manager -Djava.security.policy==$PWD/server.policy -Djboss.home.dir=$JBOSS_HOME -Djboss.modules.policy-permissions=true"

   Example 2.4. standalone.conf.bat

   set "JAVA_OPTS=%JAVA_OPTS% -Djava.security.manager -Djava.security.policy==\path\to\server.policy -Djboss.home.dir=%JBOSS_HOME% -Djboss.modules.policy-permissions=true"

3. Start the domain or server.

   Start the domain or server as normal.