com.github.veithen.maven.hermetic.HermeticSecurityManager Maven / Gradle / Ivy

Go to download
/*-
 * #%L
 * hermetic-maven-plugin
 * %%
 * Copyright (C) 2018 - 2020 Andreas Veithen
 * %%
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *      http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 * #L%
 */
package com.github.veithen.maven.hermetic;

import java.io.FilePermission;
import java.net.SocketPermission;
import java.net.URLPermission;
import java.security.Permission;

public class HermeticSecurityManager extends SecurityManager {
    private static final ThreadLocal inUninstall = new ThreadLocal<>();

    private static boolean needCheck(Permission permission) {
        return permission instanceof FilePermission
                || permission instanceof SocketPermission
                || permission instanceof URLPermission
                || (permission instanceof RuntimePermission
                        && permission.getName().equals("setSecurityManager")
                        && !Boolean.TRUE.equals(inUninstall.get()));
    }

    @Override
    public void checkPermission(Permission permission) {
        if (needCheck(permission)) {
            super.checkPermission(permission);
        }
    }

    @Override
    public void checkPermission(Permission permission, Object context) {
        if (needCheck(permission)) {
            super.checkPermission(permission, context);
        }
    }

    static void install() {
        System.setSecurityManager(new HermeticSecurityManager());
    }

    static void uninstall() {
        inUninstall.set(Boolean.TRUE);
        try {
            System.setSecurityManager(null);
        } finally {
            inUninstall.remove();
        }
    }
}