java.lang.management.ManagementPermissionThe following table provides a summary description of what the permission allows, and discusses the risks of granting code the permission.
| Permission Target Name | What the Permission Allows | Risks of Allowing this Permission |
|---|---|---|
| control | Ability to control the runtime characteristics of the Java virtual machine, for example, setting the -verbose:gc and -verbose:class flag, setting the threshold of a memory pool, and enabling and disabling the thread contention monitoring support. | This allows an attacker to control the runtime characteristics of the Java virtual machine and cause the system to misbehave. |
| monitor | Ability to retrieve runtime information about the Java virtual machine such as thread stack trace, a list of all loaded class names, and input arguments to the Java virtual machine. | This allows malicious code to monitor runtime information and uncover vulnerabilities. |
Programmers do not normally create ManagementPermission objects directly. Instead they are created by the security policy code based on reading the security policy file.
| Constructor Summary | ||
| ManagementPermission(String name) Constructs a ManagementPermission with the specified name. |
||
| ManagementPermission(String name, String actions) Constructs a new ManagementPermission object. |
| Methods inherited from class java.security.BasicPermission |
| equals, getActions, hashCode, implies, newPermissionCollection |
| Methods inherited from class java.security.Permission |
| checkGuard, getName, toString |
| Methods inherited from class java.lang.Object |
| clone, finalize, getClass, notify, notifyAll, wait, wait, wait |
name is empty or invalid.name is empty or
if arguments are invalid.