2.2. About Java Security Policies

A Java Security policy is a set of defined permissions for different classes of code. The Java Security Manager compares actions requested by applications against the security policy. If an action is allowed by the policy, the Security Manager will permit that action to take place. If the action is not allowed by the policy, the Security Manager will deny that action. The security policy can define permissions based on the location of code, on the code's signature, or based on the subject's principals.

You can create a security policy using the policytool application, which is included with the Java Development Kit (JDK). A security policy entry consists of the following configuration elements, which are configurable using policytool: