charite.christo
Class Insecure

java.lang.Object
  charite.christo.Insecure

public class Insecure
extends java.lang.Object

All potentially dangerous file operations such as file modification or running native code are chaneled through this class. This class contains all security checks.

Field Summary

static boolean	ARBITRARY_WORKING_DIRECTORY_ALLOWED
static boolean	CLASSLOADING_ALLOWED
static boolean	EXEC_ALLOWED
static java.lang.String	TEXMF_DOT_CONF
static boolean	UNCONTROLLED_FILE_MODIFICATION_ALLOWED
static java.util.HashMap<java.lang.String,java.lang.String>	VIOLATIONS

Constructor Summary

Insecure()

Method Summary

static boolean	canModify(java.io.File f)
static java.lang.Class	findClassByName(java.lang.String cn, java.io.File[] classpath)
static java.lang.String	msgNotModify(java.lang.Object f)
static boolean	renameToIgnoreSecurity(java.io.File src, java.io.File dest)
static java.lang.Process	runtimeExec(java.lang.String[] arg, java.lang.String[] env, java.io.File dir)
static void	securitySetAllowedPath(java.io.File dir)
static void	setFileModificationControl(boolean b)
static java.lang.String	stckTrcAsStrg(java.lang.Throwable t)
static void	tellNoPermission(char what, java.lang.String pfx)
static void	touchParentDir(java.io.File f)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CLASSLOADING_ALLOWED

public static final boolean CLASSLOADING_ALLOWED

See Also:

Constant Field Values

EXEC_ALLOWED

public static final boolean EXEC_ALLOWED

See Also:

Constant Field Values

ARBITRARY_WORKING_DIRECTORY_ALLOWED

public static final boolean ARBITRARY_WORKING_DIRECTORY_ALLOWED

See Also:

Constant Field Values

UNCONTROLLED_FILE_MODIFICATION_ALLOWED

public static final boolean UNCONTROLLED_FILE_MODIFICATION_ALLOWED

See Also:

Constant Field Values

TEXMF_DOT_CONF

public static final java.lang.String TEXMF_DOT_CONF

See Also:

Constant Field Values

VIOLATIONS

public static final java.util.HashMap<java.lang.String,java.lang.String> VIOLATIONS

Constructor Detail

Insecure

public Insecure()

Method Detail

msgNotModify

public static java.lang.String msgNotModify(java.lang.Object f)

canModify

public static boolean canModify(java.io.File f)

securitySetAllowedPath

public static void securitySetAllowedPath(java.io.File dir)

setFileModificationControl

public static void setFileModificationControl(boolean b)

stckTrcAsStrg

public static java.lang.String stckTrcAsStrg(java.lang.Throwable t)

tellNoPermission

public static void tellNoPermission(char what,
                                    java.lang.String pfx)

runtimeExec

public static java.lang.Process runtimeExec(java.lang.String[] arg,
                                            java.lang.String[] env,
                                            java.io.File dir)
                                     throws java.io.IOException

Throws:

java.io.IOException

renameToIgnoreSecurity

public static boolean renameToIgnoreSecurity(java.io.File src,
                                             java.io.File dest)

touchParentDir

public static void touchParentDir(java.io.File f)

findClassByName

public static java.lang.Class findClassByName(java.lang.String cn,
                                              java.io.File[] classpath)