EnablePrivilege
. For detailed information about the Java Capabilities API and the use of the targets described here, see Introduction to the Capabilities Classes.
This document includes the user descriptions for each system target and lists of some of the Java methods that check for system targets:
In the tables that follow, four pieces of information are provided for each target:
The classification of each target as High, Medium, or Low risk is based on a rough classification system that Netscape has created. These risk classifications are provided as general guidelines only. Different users are likely to have different opinions of the level of risk that a particular target entails. Netscape encourages users to read the short and long descriptions of the access requested by a particular applet or other Java code and make their own decisions. Netscape's current risk classification system is based on these distinctions:Table 0.1 Macro targets recognized by the system principal
Primitive Targets
Table 0.2 lists the primitive system targets recognized by the System principal. Long descriptions that are missing will be provided with later versions of this document.
Table 0.4 lists a subset of the targets in Table 0.2 and some of the Java methods that check for those targets.
For a list of the Java methods in Table 0.4 sorted by method, see Table 0.5.
Table 0.2 Primitive targets recognized by the System principal
Table 0.3 Parameterized targets recognized by the System principal
Parameterized Targets
Name of primitive target | Risk level | Short description |
Long description
| FileRead
High |
Reading a specific file on your hard disk. |
|
| FileWrite
High |
Modifying a specific file on your hard disk. |
| |
---|
Methods That Check for System Targets
Table 0.4 lists a subset of the targets in Table 0.2 and some of the Java methods that check for those targets. For a list of the Java methods in Table 0.4 sorted by method, see Table 0.5.
Table 0.4 Selected primitive targets and some of the methods that check for them
Name of primitive target |
Some of the methods that check for this target
| UniversalAccept
| java.net.ServerSocket
| UniversalConnect
| java.net.DatagramSocket java.net.MulticastSocket java.net.Socket netscape.net.URLConnection sun.awt.macos.MToolkit sun.awt.motif.MToolkit sun.awt.win32.MToolkit sun.awt.windows.WToolkit sun.net.www.http.HttpClient
| UniversalExecAccess
| java.lang.Runtime java.lang.System
| UniversalExitAccess
| java.lang.Runtime
| UniversalFileDelete
| java.io.File
| UniversalFileRead
| java.io.File java.io.FileInputStream java.io.RandomAccessFile sun.awt.macos.MToolkit sun.awt.motif.MToolkit sun.awt.win32.MToolkit sun.awt.windows.WToolkit
| UniversalFileWrite
| java.io.File java.io.FileOutputStream java.io.RandomAccessFile
| UniversalLinkAccess
| java.lang.Runtime java.lang.System
| UniversalListen
| java.net.DatagramSocket java.net.MulticastSocket java.net.ServerSocket
| UniversalMulticast
| java.net.DatagramSocket java.net.MulticastSocket
| UniversalPropertyRead
| java.lang.System
| UniversalPropertyWrite
| java.lang.System
| UniversalSetFactory
| java.net.ServerSocket java.net.Socket
| UniversalThreadAccess
| java.lang.Thread
| UniversalThreadGroupAccess
| java.lang.ThreadGroup
| UniversalTopLevelWindow
| java.awt.Window |
---|
Table 0.5 shows the targets and Java methods listed in Table 0.4, sorted by class and method.
Table 0.5 Some methods that require access to primitive system targets
Class | Method |
Primitive target
| java.awt.Window
| Window
| UniversalTopLevelWindow
| java.io.File
| canRead
| UniversalFileRead
|
| canWrite
| UniversalFileWrite
|
| delete
| UniversalFileDelete
|
| exists
| UniversalFileRead
|
| getCanonicalPath
| UniversalFileRead
|
| isDirectory
| UniversalFileRead
|
| isFile
| UniversalFileRead
|
| isLink
| UniversalFileRead
|
| lastAccessed
| UniversalFileRead
|
| lastStatusChange
| UniversalFileRead
|
| length
| UniversalFileRead
|
| list
| UniversalFileRead
|
| mkdir
| UniversalFileWrite
|
| renameTo
| UniversalFileWrite
| java.io.FileInputStream
| FileInputStream
| UniversalFileRead
| java.io.FileOutputStream
| FileOutputStream
| UniversalFileWrite
| java.io.RandomAccessFile
| RandomAccessFile
| UniversalFileRead
| java.lang.Runtime
| exec
| UniversalExecAccess
|
| exit
| UniversalExitAccess
|
| load
| UniversalLinkAccess
|
| loadLibrary
| UniversalLinkAccess
| java.lang.System
| getProperties
| UniversalPropertyWrite
|
| getProperty
| UniversalPropertyRead
|
| load
| UniversalLinkAccess
|
| loadLibrary
| UniversalLinkAccess
|
| setErr
| UniversalExecAccess
|
| setIn
| UniversalExecAccess
|
| setOut
| UniversalExecAccess
|
| setProperties
| UniversalPropertyWrite
| java.lang.Thread
| checkAccess
| UniversalThreadAccess
|
| interrupt
| UniversalThreadAccess
|
| resume
| UniversalThreadAccess
|
| setPriority
| UniversalThreadAccess
|
| setName
| UniversalThreadAccess
|
| setDaemon
| UniversalThreadAccess
|
| stop
| UniversalThreadAccess
|
| suspend
| UniversalThreadAccess
| java.lang.ThreadGroup
| checkAccess
| UniversalThreadGroupAccess
|
| destroy
| UniversalThreadGroupAccess
|
| resume
| UniversalThreadGroupAccess
|
| setDaemon
| UniversalThreadGroupAccess
|
| setMaxPriority
| UniversalThreadGroupAccess
|
| stop
| UniversalThreadGroupAccess
|
| suspend
| UniversalThreadGroupAccess
|
| ThreadGroup
| UniversalThreadGroupAccess
| java.net.DatagramSocket
| DatagramSocket
| UniversalListen
|
| getLocalAddress
| UniversalConnect
|
| receive
| UniversalConnect
|
| send
| UniversalConnect
| java.net.MulticastSocket
| joinGroup
| UniversalMulticast
|
| leaveGroup
| UniversalMulticast
|
| MulticastSocket
| UniversalListen
|
| send
| UniversalConnect
| java.net.ServerSocket
| accept
| UniversalAccept
|
| ServerSocket
| UniversalListen
|
| setSocketFactory
| UniversalSetFactory
| java.net.Socket
| MSocket
| UniversalConnect
|
| setSocketImplFactory
| UniversalSetFactory
| netscape.net.URLConnection
| connect
| UniversalConnect
| sun.awt.macos.MTooklit
| getImageFromHash
| UniversalFileRead
| sun.awt.motif.MTooklit
| getImageFromHash
| UniversalFileRead
| sun.awt.win32.MTooklit
| getImageFromHash
| UniversalFileRead
| sun.awt.windows.MTooklit
| getImageFromHash
| UniversalFileRead |
---|
Last Updated: 08/06/97 10:31:14
Netscape Communications Corporation ("Netscape") and its licensors retain all ownership rights to this document (the "Document"). Use of the Document is governed by applicable copyright law. Netscape may revise this Document from time to time without notice.
THIS DOCUMENT IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN NO EVENT SHALL NETSCAPE BE LIABLE FOR ANY LOSS OF PROFITS, LOSS OF BUSINESS, LOSS OF USE OR DATA, INTERRUPTION OF BUSINESS, OR FOR INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY KIND, ARISING FROM ANY ERROR IN THIS DOCUMENT.
The Document is copyright © 1997 Netscape Communications Corporation. All rights reserved.
The Software includes encryption software from RSA Data Security, Inc. Copyright © 1994, 1995 RSA Data Security, Inc. All rights reserved. Portions of the Software include technology used under license from Verity, Inc. and are copyrighted. Portions of the Software copyright © 1994, 1995 Sun Microsystems, Inc. All rights reserved. Portions of the Software copyright © 1995 PEER Networks, Inc. All rights reserved. Portions of the Software copyright © 1996 Mortice Kern Systems, Inc. All rights reserved. The portion of the Software that provides the DBM function is copyright (c) 1990, 1993, 1994 The Regents of the University of California. All rights reserved. This code is derived from software contributed to Berkeley by Margo Seltzer. Redistribution and use in source and binary forms of the DBM code, with or without modification, are permitted provided that the following conditions are met:
1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
3. All advertising materials mentioning features or use of this software must display the following acknowledgement:
This product includes software developed by the University of California, Berkeley and its contributors.
4. Neither the name of the University nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
THE SOFTWARE WHICH PROVIDES THE DBM FUNCTION IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ''AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.Netscape and Netscape Navigator are registered trademarks of Netscape Communications Corporation in the United States and other countries. Netscape's logos and Netscape product and service names are also trademarks of Netscape Communications Corporation, which may be registered in other countries. Other product and brand names are trademarks of their respective owners.
The downloading, export or reexport of Netscape software or any underlying information or technology must be in full compliance with all United States and other applicable laws and regulations. Any provision of Netscape software or documentation to the U.S. Government is with restricted rights as described in the license agreement accompanying Netscape software.
Any sample code included above is provided for your use on an "AS IS" basis, under the Netscape License Agreement - Terms of Use