All Classes and Interfaces
Class
Description
A structure to use as a representation of the checkXxx method the instrumentation will inject.
Implementation of the
EntitlementChecker
interface
with each method implemented as a one-liner call into PolicyChecker
.Marker interface to ensure that only
Entitlement
are
part of a Policy
.Called by the agent during
agentmain
to configure the entitlement system,
instantiate and configure an EntitlementChecker
,
make it available to the bootstrap library via EntitlementInitialization.checker()
,
and then install the Instrumenter
to begin injecting our instrumentation.Internal policy type (not-parseable -- not available to plugins).
This annotation indicates an
Entitlement
is available
to "external" classes such as those used in plugins.
This structure facilitates looking up files entitlements for a particular component+module combination, given that grants can occur
at the directory level in addition to the individual file level.
Describes a file entitlement with a path and mode.
Describes an entitlement for inbound network actions (listen/accept/receive)
The SPI service entry point for instrumentation.
An Entitlement to allow loading native libraries
A structure to use as a key/lookup for a method target of instrumentation
Describes an entitlement for outbound network actions (connect/send)
Resolves paths for known directories checked by entitlements.
Standard manager for resolving known paths.
A holder for scoped entitlements.
Contains one "check" method for each distinct kind of check we do
(as opposed to
EntitlementChecker
,
which has a method for each distinct >method we instrument).Connects the
PolicyChecker
interface to a PolicyManager
to perform the checks in accordance with the policy.Determines, from the specified policy information, which entitlements are granted to a given caller class,
as well as whether certain caller classes (like those built into the JDK) should be trivially allowed,
meaning they are always entitled regardless of policy.
This class contains all the entitlements by type, plus the
FileAccessTree
for the special case of filesystem entitlements.A parser to parse policy files for entitlements.
An exception specifically for policy parsing errors.
This exception is used to track validation errors thrown during the construction
of entitlements.
Describes an entitlement for reading file store attributes (e.g.
A holder for entitlements within a single scope.
An Entitlement to allow setting properties to a single Https connection after this has been created
A
ClassFileTransformer
that applies an Instrumenter
to the appropriate classes.A Policy and associated versions to which the policy applies
An Entitlement to allow writing all properties such as system properties.
An Entitlement to allow writing properties such as system properties.