See the Policy File Effects

Now that you have created the examplepolicy policy file, you can execute the WriteFile applet to create and to write the file writetest, as shown in the following figure.

Whenever you run an applet, or an application with a security manager, the policy files that are loaded and used by default are the ones specified in the "security properties file", which is located in one of the following directories:

• Windows: java.home\lib\security\java.security
• UNIX: java.home/lib/security/java.security

Note:   The java.home environment variable names the directory into which the JRE was installed.

The policy file locations are specified as the values of properties whose names take the form

policy.url.n

Where n indicates a number. Specify each property value in a line that takes the following form:

policy.url.n=URL

Where URL is a URL specification. For example, the default policy files, sometimes referred to as the system and user policy files, respectively, are defined in the security properties file as

policy.url.1=file:${java.home}/lib/security/java.policy
policy.url.2=file:${user.home}/.java.policy

In the previous step you did not modify one of these existing policy files. You created a new policy file named examplepolicy. There are two possible ways you can have the examplepolicy file be considered as part of the overall policy, in addition to the policy files specified in the security properties file. You can either specify the additional policy file in a property passed to the runtime system, as described in Approach 1, or add a line in the security properties file specifying the additional policy file, as described in Approach 2.

    hosts:    dns files nis

Approach 1

You can use the appletviewer command-line argument, -J-Djava.security.policy, to specify a policy file that should be used, in addition to the ones specified in the security properties file. To run the WriteFile applet with your new examplepolicy policy file included, type the following in the directory in which examplepolicy is stored:

appletviewer -J-Djava.security.policy=examplepolicy  
 http://docs.oracle.com/javase/tutorial/security/tour1/examples/WriteFile.html

If the applet still reports an error, you must troubleshoot the policy file. Use the Policy Tool to open the examplepolicy file (using File > Open) and check the policy entries you just created in the previous step, Set Up a Policy File to Grant the Required Permissions.

To view or edit an existing policy entry, click on the line displaying that entry in the main Policy Tool window, then choose the Edit Policy Entry button. You can also double-click the line for that entry.

This launches the same type of Policy Entry dialog box that displays when you are adding a new policy entry after choosing the Add Policy Entry button, except in this case the dialog box is filled in with the existing policy entry information. To change the information, retype it (for the CodeBase and SignedBy values) or add, remove, or modify permissions.

Approach 2

You can specify a number of URLs (including ones of the form "http://") in policy.url.n properties in the security properties file, and all the designated policy files will get loaded.

So one way to have our examplepolicy file's policy entry considered by the appletviewer is to add an entry specifying that policy file in the security properties file.

To modify the security properties file, open it in an editor suitable for editing an ASCII text file. Then add the following line after the line starting with policy.url.2:

• Windows: policy.url.3=file:/C:/Test/examplepolicy
• UNIX: policy.url.3=file:${user.home}/test/examplepolicy

On a UNIX system you can also explicitly specify your home directory:

policy.url.3=file:/home/susanj/test/examplepolicy

Now you can run the following:

appletviewer http://docs.oracle.com/javase/tutorial/security/tour1/examples/WriteFile.html

Type this command on one line, without spaces in the URL.

If you still get a security exception, you must troubleshoot your new policy file. Use the Policy Tool to check the policy entry you just created in the previous step, Set Up a Policy File to Grant the Required Permissions. Change any typos or other errors.