[H-GEN] JVM internal security

[Martin Pool]

On Wed, Sep 27, 2000 at 05:16:30AM +0000, Allen Grace wrote:

> Hi all
> 
> I suspect that I know the answer to this question already, but you never
> know...
> 
> I've written a java applet as part of a ppp connection monitoring
> system, intended to run inside the LAN here. The webserver
> ('192.168.1.1') has served the applet to the client, which then tries to
> exchange UDP packets with another machine (viz. '192.168.1.3') running a
> perl script with its finger on the pulse of the ppp interface. Lovely so
> far. Except that netscape's JVM doesn't seem to like the applet making
> its own network connections.
> 
> netscape.security.AppletSecurityException: security.Couldn't connect to
> '192.168.1.3' with origin from '192.168.1.1'.
>   at
> netscape.security.AppletSecurity.checkConnect(AppletSecurity.java:917)
>   at
> netscape.security.AppletSecurity.checkConnect(AppletSecurity.java:929)
>   at
> netscape.security.AppletSecurity.checkConnect(AppletSecurity.java:798)
>   at java.lang.SecurityManager.checkConnect(SecurityManager.java:718)
>   at java.net.DatagramSocket.send(DatagramSocket.java:167)
>   at PPPClient.register_with_server(PPPClient.java:60)
>   at PPPClient.init(PPPClient.java:46)
> 
> There wouldn't be anything I could do about this, could there? Apart
> from excluding netscape and just making the java bit standalone, or
> something along those lines.

 * On the client, mark the applet as allowed to make network
   connections to other machines

 * Run a program on the web server that accepts the data and redirects
   it to the final destination.

-- 
Martin Pool, Linuxcare, Inc.
mbp at linuxcare.com, http://www.linuxcare.com/, +61 2 6262 8990
GPG 1024D/A0B3E88B: AFAC 578F 1841 EE6B FD95  E143 3C63 CA3F A0B3 E88B
Linuxcare. Support for the revolution.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
URL: <http://lists.humbug.org.au/pipermail/general/attachments/20000927/4d6aee1c/attachment.sig>