启用Java Security Manager OSGi Equinox并限制捆绑包权限

Question

I want to add Java Security Manager for a OSGi equinox based system. My problem is that after enabling the JSM, every bundle get the BundlePermission from the framework, which result in java.lang.AllPermission to all the bundles.

How can I restrict for bundles for different policies?, eg restrict some permissions based on the install location. etc..

Answer 1

You should use the ConditionalPermissionAdmin service to set the desired permissions for the bundles. See https://osgi.org/javadoc/r4v43/core/org/osgi/service/condpermadmin/ConditionalPermissionAdmin.html .