Tomcat permissions and class loading

[Louis Simard]

Forgot to post the mail to the list. Here goes...

At 2010-07-15 21:57 GMT, I wrote:
>> If I add the following permission in the file
>> /etc/tomcat6/policy.d/50local.policy, everything's fine:
>>
>>    grant codeBase "file:${catalina.base}/webapps/mywebapp/-" {
>>        permission java.security.AllPermission;
>>    };
>>
>>  I would of course prefer to add only the needed permissions,
>> but I could not find them in the documentation, nor by googling.
>> Any clue?
>
> Would this do the trick:
>
>  permission java.lang.RuntimePermission "getClassLoader";
>  permission java.lang.RuntimePermission "createClassLoader";
>