The Java TM Tutorial

| Start of Tutorial > Start of Trail > Start of Lesson | Search

Trail: Security in JDK 1.2
Lesson: Implementing Your Own Permission

## Steps for a User Running TerrysGame (Kim)

> The steps a user, such as Kim, would take, are:

### Import the Certificates as Trusted Certificates

>     keytool -import -alias chris -file Chris.cer -keystore kim.keystore
>     keytool -import -alias terry -file Terry.cer -keystore kim.keystore

### Set Up a Policy File With the Required Permissions

> Here's the complete kim.policy policy file, as described in A Sample Policy File.

### Run TerrysGame

> To set the high score:

> >     java -Djava.security.manager -Djava.security.policy=kim.policy
> >      -classpath hs.jar;terry.jar com.gamedev.games.TerrysGame set 456

> To get the high score:

> >     java -Djava.security.manager -Djava.security.policy=kim.policy
> >      -classpath hs.jar;terry.jar com.gamedev.games.TerrysGame get

> Notes:
> - If you don't specify `-Djava.security.manager`, the application will run unrestricted (policy files and permissions won't be checked).

> - The `-Djava.security.policy=kim.policy` tells where the policy file is. Note: There are other ways of specifying the policy file. For example, you can add an entry in the security properties file that specifies the inclusion of `kim.policy`, as discussed at the end of the Quick Tour of Controlling Applets lesson.

> - `-classpath hs.jar;terry.jar` specifies the JAR files that contain the class files needed. For Windows, use a semicolon (";") to separate JAR files; for Unix, use a colon (":").

> - The policy file `kim.policy` specifies the keystore `kim.keystore`. Since it does not provide an absolute URL location for the keystore, the keystore is assumed to be in the same directory as the policy file.

| Start of Tutorial > Start of Trail > Start of Lesson | Search