public final class

ManagementPermission

extends BasicPermission
java.lang.Object
   ↳ java.security.Permission
     ↳ java.security.BasicPermission
       ↳ java.lang.management.ManagementPermission

Class Overview

The permission which the SecurityManager will check when code that is running with a SecurityManager calls methods defined in the management interface for the Java platform.

The following table provides a summary description of what the permission allows, and discusses the risks of granting code the permission.

Permission Target Name What the Permission Allows Risks of Allowing this Permission
control Ability to control the runtime characteristics of the Java virtual machine, for example, setting the -verbose:gc and -verbose:class flag, setting the threshold of a memory pool, and enabling and disabling the thread contention monitoring support. This allows an attacker to control the runtime characteristics of the Java virtual machine and cause the system to misbehave.
monitor Ability to retrieve runtime information about the Java virtual machine such as thread stack trace, a list of all loaded class names, and input arguments to the Java virtual machine. This allows malicious code to monitor runtime information and uncover vulnerabilities.

Programmers do not normally create ManagementPermission objects directly. Instead they are created by the security policy code based on reading the security policy file.

Summary

Public Constructors
ManagementPermission(String name)
Constructs a ManagementPermission with the specified name.
ManagementPermission(String name, String actions)
Constructs a new ManagementPermission object.
[Expand]
Inherited Methods
From class java.security.BasicPermission
From class java.security.Permission
From class java.lang.Object
From interface java.security.Guard

Public Constructors

public ManagementPermission (String name)

Constructs a ManagementPermission with the specified name.

Parameters
name Permission name. Must be either "monitor" or "control".
Throws
NullPointerException if name is null.
IllegalArgumentException if name is empty or invalid.

public ManagementPermission (String name, String actions)

Constructs a new ManagementPermission object.

Parameters
name Permission name. Must be either "monitor" or "control".
actions Must be either null or the empty string.
Throws
NullPointerException if name is null.
IllegalArgumentException if name is empty or if arguments are invalid.