# --- Way to violate file acces security in Java Security ---

Sudhakaran (sudhakar_k1@verifone.com)
Tue, 1 Dec 1998 16:09:04 -0800

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Mark Herschberg: "Certificate Deployment"
- Previous message: MSenapati@aol.com: "difficulties to run a local executable from a java applet"

This is a multi-part message in MIME format.

------=_NextPart_000_0004_01BE1D44.EAEE73F0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Sir,

Here I am trying to explain a situation in which the files and =
directory access of the java security will be easily violated.

Assume that for Test.class I am giving listing,reading,writting and =
deleting permission for the files under=20
"c:\jdk1.1.6\bin".

Assume that The class Test.class is having a call requesting AWT =
FileDialog. On calling this java will through a native system =
FileDialog. Using this file dialog we can go to any directory , any =
drive and delete , cut , paste files from any where to any where.

Though the Test.class is not having the write to mess other =
directories it can do so.=20

I FEEL SUN JAVA SHOULD TAKE THE RESPONSIBILITY OF IMPLEMENTING FILE =
DIALOG IN PURE JAVA WAY, INSTEAD OF USING NATIVE FILE DIALOGS.=20

-Sudhakaran

------=_NextPart_000_0004_01BE1D44.EAEE73F0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">
Sir,
Here I am trying = to explain a=20 situation in which the files and directory access of the java security = will be=20 easily violated.
Assume that for = Test.class I am=20 giving listing,reading,writting and deleting permission for the = files=20 under
"c:\jdk1.1.6\bin".
Assume that The = class=20 Test.class is having a call requesting AWT FileDialog. On calling = this=20 java will through a native system FileDialog. Using this file dialog we = can go=20 to any directory , any drive and delete , cut , paste files from any = where to=20 any where.
Though the = Test.class is not=20 having the write to mess other directories it can do so.
I FEEL SUN JAVA = SHOULD TAKE=20 THE RESPONSIBILITY OF IMPLEMENTING FILE DIALOG IN PURE JAVA WAY, INSTEAD = OF=20 USING NATIVE FILE DIALOGS.
-Sudhakaran
------=_NextPart_000_0004_01BE1D44.EAEE73F0--

- Next message: Mark Herschberg: "Certificate Deployment"
- Previous message: MSenapati@aol.com: "difficulties to run a local executable from a java applet"