001/* AWTPermission.java -- AWT related permissions 002 Copyright (C) 2000, 2002 Free Software Foundation 003 004This file is part of GNU Classpath. 005 006GNU Classpath is free software; you can redistribute it and/or modify 007it under the terms of the GNU General Public License as published by 008the Free Software Foundation; either version 2, or (at your option) 009any later version. 010 011GNU Classpath is distributed in the hope that it will be useful, but 012WITHOUT ANY WARRANTY; without even the implied warranty of 013MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 014General Public License for more details. 015 016You should have received a copy of the GNU General Public License 017along with GNU Classpath; see the file COPYING. If not, write to the 018Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 01902110-1301 USA. 020 021Linking this library statically or dynamically with other modules is 022making a combined work based on this library. Thus, the terms and 023conditions of the GNU General Public License cover the whole 024combination. 025 026As a special exception, the copyright holders of this library give you 027permission to link this library with independent modules to produce an 028executable, regardless of the license terms of these independent 029modules, and to copy and distribute the resulting executable under 030terms of your choice, provided that you also meet, for each linked 031independent module, the terms and conditions of the license of that 032module. An independent module is a module which is not derived from 033or based on this library. If you modify this library, you may extend 034this exception to your version of the library, but you are not 035obligated to do so. If you do not wish to do so, delete this 036exception statement from your version. */ 037 038 039package java.awt; 040 041import java.security.BasicPermission; 042 043/** 044 * This class implements permissions for AWT. This is a named 045 * permission. No actions are defined. 046 * 047 * <p>The following table provides a list of all the possible AWTPermission 048 * permission names with a description of what that permission allows.<br> 049 * <table border=1> 050 * <tr><th>Permission Name</th><th>Permission Allows</th><th>Risks</th</tr> 051 * <tr> 052 * <td><code>accessClipboard</code></td> 053 * <td>posting and reading the AWT clipboard</td> 054 * <td>the clipboard may contain sensitive data</td></tr> 055 * <tr> 056 * <td><code>accessEventQueue</code></td> 057 * <td>access to the AWT event queue</td> 058 * <td>malicious code could remove real events and replace them with bogus 059 * ones, including simulating the user granting permission</td></tr> 060 * <tr> 061 * <td><code>listenToAllAWTEvents</code></td> 062 * <td>listen to system-wide AWT events</td> 063 * <td>malicious code can read passwords entered in an AWT event, and in 064 * combination with accessEventQueue, could fake system events</td></tr> 065 * <tr> 066 * <td><code>showWindowWithoutWarningBanner</code></td> 067 * <td>display a window without a banner notification of insecurity</td> 068 * <td>malicious code could install a Trojan horse applet that looks like 069 * a normal window, and thus steal data like passwords</td></tr> 070 * <tr> 071 * <td><code>readDisplayPixels</code></td> 072 * <td>read back pixels from the display screen</td> 073 * <td>malicious code could snoop on the user's actions</td></tr> 074 * <tr> 075 * <td><code>createRobot</code></td> 076 * <td>create an instance of java.awt.Robot</td> 077 * <td>these objects can generate events as though they were the user; so 078 * malicious code could control the system</td></tr> 079 * <tr> 080 * <td><code>fullScreenExclusive</code></td> 081 * <td>enter full-screen exclusive mode</td> 082 * <td>malicious code could masquerade as a trusted program</td></tr> 083 * </table> 084 * 085 * @author Tom Tromey (tromey@redhat.com) 086 * @since 1.2 087 * @status updated to 1.4 088 */ 089public final class AWTPermission extends BasicPermission 090{ 091 /** 092 * Compatible with JDK 1.2+. 093 */ 094 private static final long serialVersionUID = 8890392402588814465L; 095 096 /** 097 * Construct a AWTPermission with the given name. 098 * 099 * @param name the permission name 100 * @throws NullPointerException if name is null 101 * @throws IllegalArgumentException if name is invalid 102 */ 103 public AWTPermission(String name) 104 { 105 super(name); 106 } 107 108 /** 109 * Create a new permission with the specified name. The actions argument 110 * is ignored, as AWT permissions have no actions. 111 * 112 * @param name the permission name 113 * @param actions ignored 114 * @throws NullPointerException if name is null 115 * @throws IllegalArgumentException if name is invalid 116 */ 117 public AWTPermission(String name, String actions) 118 { 119 super(name); 120 } 121} // class AWTPermission