How to grant AllPermission to not extracted war file in tomcat

Question

Hello,

I'm developing a web application and have created a war file. If I deploy it to my tomcat server, it is used without being unpacked (which is the setting I want to have for this server).

For unpacked web apps I have a policy file to grant AllPermission to my application. The file is served with the application and installed into e.g. /etc/tomcat5.5/policy.d/40tc.policy. It contains these lines:

grant codeBase "file:${catalina.base}/webapps/tc/-" {
    permission java.security.AllPermission;
};

But what has the codeBase to be for packed war files? The war file is located at ${catalina.base}/webapps/tc.war

I've tried the following:

grant codeBase "file:${catalina.base}/webapps/tc.war" {
    permission java.security.AllPermission;
};

and

grant codeBase "jar:file:${catalina.base}/webapps/tc.war" {
    permission java.security.AllPermission;
};

But nothings works. There are several permissions that must be granted, so AllPermission should be set for only the application. (Global changes in the server configuration are not allowed.)

Any suggestion what to do next?

Thanks, André

Answer 1

grant codeBase "file:${catalina.base}/webapps/tc.war" { 
permission java.security.AllPermission; 

};

Is this what you're looking for?