// ============================================================================
// james.policy - Security Policy Permissions for James
//
// This file contains a default set of security policies to be enforced (by the
// JVM). 
//
// $Id: james.policy,v 1.02 2006/09/06 15:42:36 ggrandes Exp $
// ============================================================================
grant codeBase "file:${phoenix.home}/bin/phoenix-loader.jar" {
  //
  permission java.security.SecurityPermission "setPolicy";
  //
  permission java.lang.RuntimePermission "getAttribute";
  permission java.lang.RuntimePermission "getClassLoader";
  permission java.lang.RuntimePermission "createClassLoader";
  permission java.lang.RuntimePermission "setContextClassLoader";
  permission java.lang.RuntimePermission "shutdownHooks";
  permission java.lang.RuntimePermission "i18n.clearCompleteCache";
  //
  permission java.util.PropertyPermission "phoenix.home", "read, write";
  permission java.util.PropertyPermission "*", "read, write";
  //
  //permission java.net.SocketPermission "localhost:1024-", "listen";
  permission java.net.SocketPermission "localhost:25", "listen";
  permission java.net.SocketPermission "localhost:110", "listen";
  permission java.net.SocketPermission "localhost:2525", "listen";
  permission java.net.SocketPermission "localhost:4555", "listen";
  permission java.net.SocketPermission "*", "accept, resolve";
  permission java.net.SocketPermission "*:25", "connect, resolve";
  permission java.net.SocketPermission "*:53", "connect, resolve";
  //
  permission java.io.FilePermission "${user.dir}${/}*", "read";
  permission java.io.FilePermission "${java.home}${/}-", "read";
  permission java.io.FilePermission "${java.io.tmpdir}${/}-", "read, write, delete";
  //
  permission java.io.FilePermission "${phoenix.home}${/}-", "read";
  permission java.io.FilePermission "${phoenix.home}${/}logs${/}-", "write";
  permission java.io.FilePermission "${phoenix.home}${/}work${/}-", "read, write, delete";
  permission java.io.FilePermission "${phoenix.home}${/}temp${/}-", "read, write, delete";
  permission java.io.FilePermission "${phoenix.home}${/}apps${/}-", "read, write, delete";
  //
  permission java.io.FilePermission "/etc/resolv.conf", "read";
  permission java.io.FilePermission "/opt/tempos21/lib/-", "read";
  permission java.io.FilePermission "/opt/tempos21/bsh/-", "read";
  permission java.io.FilePermission "/opt/tempos21/bsh/dynamic/-", "read, write";
  permission java.io.FilePermission "/opt/tempos21/bsh/pSPF.pl", "execute";
  //
  //permission java.security.AllPermission;
};