From b15b2a31cb4ec8ebaaf435259a66644d81fdb4a9 Mon Sep 17 00:00:00 2001
From: Sven Gothel <sgothel@jausoft.com>
Date: Wed, 22 Jan 2014 10:58:22 +0100
Subject: Refine adaption of Oracle's Deployment changes, i.e. >= 7u51
Partial revert commit 971190d8718bb1e2b7eafdd49cfa2523dd8a8152:
- Manifest: 'Permissions: sandbox'
so we do not raise privileges!
Refine description about signing, sandbox and privileges in html files.
---
jnlp-files/CustomText.jnlp | 3 ---
jnlp-files/FlyingText.jnlp | 3 ---
jnlp-files/Gears.jnlp | 3 ---
jnlp-files/GearsDebug.jnlp | 3 ---
jnlp-files/HDR.jnlp | 3 ---
jnlp-files/HDRDebug.jnlp | 3 ---
jnlp-files/HWShadowmapsSimple.jnlp | 3 ---
jnlp-files/InfiniteShadowVolumes.jnlp | 3 ---
jnlp-files/JRefract.jnlp | 3 ---
jnlp-files/JRefractNoOGL.jnlp | 3 ---
jnlp-files/ParticleEngine.jnlp | 3 ---
jnlp-files/ProceduralTexturePhysics.jnlp | 3 ---
jnlp-files/TestTextRenderer.jnlp | 3 ---
jnlp-files/TextCube.jnlp | 3 ---
jnlp-files/TextCubeDebug.jnlp | 3 ---
jnlp-files/TextFlow.jnlp | 3 ---
jnlp-files/VertexArrayRange.jnlp | 3 ---
jnlp-files/VertexBufferObject.jnlp | 3 ---
jnlp-files/VertexProgRefract.jnlp | 3 ---
jnlp-files/VertexProgWarp.jnlp | 3 ---
jnlp-files/WorldWindBasicDemo.jnlp | 3 ---
jnlp-files/XTrans.jnlp | 3 ---
jnlp-files/applet-gears-debug.jnlp | 3 ---
jnlp-files/applet-gears-napplet.html | 8 ++++++--
jnlp-files/applet-gears.html | 12 ++++++------
jnlp-files/applet-gears.jnlp | 4 ----
jnlp-files/applet-gearsjoal-napplet.html | 8 ++++++--
jnlp-files/applet-gearsjoal.html | 8 ++++++--
jnlp-files/applet-gearsjoal.jnlp | 3 ---
jnlp-files/version.jnlp | 3 ---
jnlp-files/worldwind.jnlp | 3 ---
manifest.mf | 2 +-
32 files changed, 25 insertions(+), 95 deletions(-)
diff --git a/jnlp-files/CustomText.jnlp b/jnlp-files/CustomText.jnlp
index 9232ab5..1a10367 100644
--- a/jnlp-files/CustomText.jnlp
+++ b/jnlp-files/CustomText.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/FlyingText.jnlp b/jnlp-files/FlyingText.jnlp
index 9c3b303..bdbdf54 100644
--- a/jnlp-files/FlyingText.jnlp
+++ b/jnlp-files/FlyingText.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/Gears.jnlp b/jnlp-files/Gears.jnlp
index b677d2e..3b0da3a 100755
--- a/jnlp-files/Gears.jnlp
+++ b/jnlp-files/Gears.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/GearsDebug.jnlp b/jnlp-files/GearsDebug.jnlp
index 3be3340..1495ab4 100755
--- a/jnlp-files/GearsDebug.jnlp
+++ b/jnlp-files/GearsDebug.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/HDR.jnlp b/jnlp-files/HDR.jnlp
index c3ab8af..8685065 100755
--- a/jnlp-files/HDR.jnlp
+++ b/jnlp-files/HDR.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/HDRDebug.jnlp b/jnlp-files/HDRDebug.jnlp
index 4f494f1..d49f92c 100755
--- a/jnlp-files/HDRDebug.jnlp
+++ b/jnlp-files/HDRDebug.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/HWShadowmapsSimple.jnlp b/jnlp-files/HWShadowmapsSimple.jnlp
index 6b9aa40..51af1b8 100644
--- a/jnlp-files/HWShadowmapsSimple.jnlp
+++ b/jnlp-files/HWShadowmapsSimple.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/InfiniteShadowVolumes.jnlp b/jnlp-files/InfiniteShadowVolumes.jnlp
index fdbd021..ff1d3a2 100644
--- a/jnlp-files/InfiniteShadowVolumes.jnlp
+++ b/jnlp-files/InfiniteShadowVolumes.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/JRefract.jnlp b/jnlp-files/JRefract.jnlp
index a286273..8f63eee 100644
--- a/jnlp-files/JRefract.jnlp
+++ b/jnlp-files/JRefract.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/JRefractNoOGL.jnlp b/jnlp-files/JRefractNoOGL.jnlp
index a259182..dbc8905 100644
--- a/jnlp-files/JRefractNoOGL.jnlp
+++ b/jnlp-files/JRefractNoOGL.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/ParticleEngine.jnlp b/jnlp-files/ParticleEngine.jnlp
index 3c15973..e6ae8ce 100644
--- a/jnlp-files/ParticleEngine.jnlp
+++ b/jnlp-files/ParticleEngine.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/ProceduralTexturePhysics.jnlp b/jnlp-files/ProceduralTexturePhysics.jnlp
index 124edac..c5c8bd0 100644
--- a/jnlp-files/ProceduralTexturePhysics.jnlp
+++ b/jnlp-files/ProceduralTexturePhysics.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/TestTextRenderer.jnlp b/jnlp-files/TestTextRenderer.jnlp
index 0493e19..d08622d 100644
--- a/jnlp-files/TestTextRenderer.jnlp
+++ b/jnlp-files/TestTextRenderer.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/TextCube.jnlp b/jnlp-files/TextCube.jnlp
index 31edc8c..ef55d33 100644
--- a/jnlp-files/TextCube.jnlp
+++ b/jnlp-files/TextCube.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/TextCubeDebug.jnlp b/jnlp-files/TextCubeDebug.jnlp
index 0688557..e54aeb1 100644
--- a/jnlp-files/TextCubeDebug.jnlp
+++ b/jnlp-files/TextCubeDebug.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/TextFlow.jnlp b/jnlp-files/TextFlow.jnlp
index 1427505..63bcc86 100644
--- a/jnlp-files/TextFlow.jnlp
+++ b/jnlp-files/TextFlow.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/VertexArrayRange.jnlp b/jnlp-files/VertexArrayRange.jnlp
index 72f669d..aa90f65 100644
--- a/jnlp-files/VertexArrayRange.jnlp
+++ b/jnlp-files/VertexArrayRange.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/VertexBufferObject.jnlp b/jnlp-files/VertexBufferObject.jnlp
index f7c7526..febb732 100644
--- a/jnlp-files/VertexBufferObject.jnlp
+++ b/jnlp-files/VertexBufferObject.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/VertexProgRefract.jnlp b/jnlp-files/VertexProgRefract.jnlp
index 124ef47..887d00c 100644
--- a/jnlp-files/VertexProgRefract.jnlp
+++ b/jnlp-files/VertexProgRefract.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/VertexProgWarp.jnlp b/jnlp-files/VertexProgWarp.jnlp
index 8c9a71c..7374ae4 100644
--- a/jnlp-files/VertexProgWarp.jnlp
+++ b/jnlp-files/VertexProgWarp.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/WorldWindBasicDemo.jnlp b/jnlp-files/WorldWindBasicDemo.jnlp
index 810779b..dbb52aa 100644
--- a/jnlp-files/WorldWindBasicDemo.jnlp
+++ b/jnlp-files/WorldWindBasicDemo.jnlp
@@ -11,9 +11,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.5+"
diff --git a/jnlp-files/XTrans.jnlp b/jnlp-files/XTrans.jnlp
index 0cad96e..5d4e4da 100644
--- a/jnlp-files/XTrans.jnlp
+++ b/jnlp-files/XTrans.jnlp
@@ -10,9 +10,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/applet-gears-debug.jnlp b/jnlp-files/applet-gears-debug.jnlp
index a87db59..f188997 100644
--- a/jnlp-files/applet-gears-debug.jnlp
+++ b/jnlp-files/applet-gears-debug.jnlp
@@ -9,9 +9,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/applet-gears-napplet.html b/jnlp-files/applet-gears-napplet.html
index cb984bf..8d074e7 100644
--- a/jnlp-files/applet-gears-napplet.html
+++ b/jnlp-files/applet-gears-napplet.html
@@ -67,8 +67,12 @@ Java code which needs to be signed in order to deploy applets using
JOGL and is the only certificate the end user must accept.
</del><br/>
Sadly, due to Oracle's Java Applet Plugin update 7u51,
-unsigned applets are no more allowed and hence the
-Applet sandbox is being taken away.
+unsigned applets are no more allowed and effectively
+lower the bar to create user applets with raised privileges.<br/>
+Hence JogAmp Community <b>signs</b> jogl-all.jar and gluegen-rt.jar, which contain the
+JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.<br/>
+jogl-demos.jar's manifest file uses <i>Permissions: sandbox</i>
+to <b>not raise privileges</b>.
</P>
</body>
diff --git a/jnlp-files/applet-gears.html b/jnlp-files/applet-gears.html
index 94f563f..727436a 100644
--- a/jnlp-files/applet-gears.html
+++ b/jnlp-files/applet-gears.html
@@ -87,10 +87,6 @@ Where the referenced JNLP file <em>applet-gears.jnlp</em> looks as follow:
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
-
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
@@ -120,8 +116,12 @@ Java code which needs to be signed in order to deploy applets using
JOGL and is the only certificate the end user must accept.
</del><br/>
Sadly, due to Oracle's Java Applet Plugin update 7u51,
-unsigned applets are no more allowed and hence the
-Applet sandbox is being taken away.
+unsigned applets are no more allowed and effectively
+lower the bar to create user applets with raised privileges.<br/>
+Hence JogAmp Community <b>signs</b> jogl-all.jar and gluegen-rt.jar, which contain the
+JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.<br/>
+jogl-demos.jar's manifest file uses <i>Permissions: sandbox</i>
+to <b>not raise privileges</b>.
</p>
</body>
diff --git a/jnlp-files/applet-gears.jnlp b/jnlp-files/applet-gears.jnlp
index 47dbcab..bb8246d 100644
--- a/jnlp-files/applet-gears.jnlp
+++ b/jnlp-files/applet-gears.jnlp
@@ -9,10 +9,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
-
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/applet-gearsjoal-napplet.html b/jnlp-files/applet-gearsjoal-napplet.html
index a6599d4..466b6bb 100644
--- a/jnlp-files/applet-gearsjoal-napplet.html
+++ b/jnlp-files/applet-gearsjoal-napplet.html
@@ -42,8 +42,12 @@ Java code which needs to be signed in order to deploy applets using
JOGL and is the only certificate the end user must accept.
</del><br/>
Sadly, due to Oracle's Java Applet Plugin update 7u51,
-unsigned applets are no more allowed and hence the
-Applet sandbox is being taken away.
+unsigned applets are no more allowed and effectively
+lower the bar to create user applets with raised privileges.<br/>
+Hence JogAmp Community <b>signs</b> jogl-all.jar and gluegen-rt.jar, which contain the
+JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.<br/>
+jogl-demos.jar's manifest file uses <i>Permissions: sandbox</i>
+to <b>not raise privileges</b>.
</P>
</body>
diff --git a/jnlp-files/applet-gearsjoal.html b/jnlp-files/applet-gearsjoal.html
index 24068ab..52969be 100644
--- a/jnlp-files/applet-gearsjoal.html
+++ b/jnlp-files/applet-gearsjoal.html
@@ -44,8 +44,12 @@ Java code which needs to be signed in order to deploy applets using
JOGL and is the only certificate the end user must accept.
</del><br/>
Sadly, due to Oracle's Java Applet Plugin update 7u51,
-unsigned applets are no more allowed and hence the
-Applet sandbox is being taken away.
+unsigned applets are no more allowed and effectively
+lower the bar to create user applets with raised privileges.<br/>
+Hence JogAmp Community <b>signs</b> jogl-all.jar and gluegen-rt.jar, which contain the
+JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.<br/>
+jogl-demos.jar's manifest file uses <i>Permissions: sandbox</i>
+to <b>not raise privileges</b>.
</P>
</body>
</html>
diff --git a/jnlp-files/applet-gearsjoal.jnlp b/jnlp-files/applet-gearsjoal.jnlp
index e08f3c7..c097256 100644
--- a/jnlp-files/applet-gearsjoal.jnlp
+++ b/jnlp-files/applet-gearsjoal.jnlp
@@ -9,9 +9,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/version.jnlp b/jnlp-files/version.jnlp
index 52806ee..9687cc6 100644
--- a/jnlp-files/version.jnlp
+++ b/jnlp-files/version.jnlp
@@ -9,9 +9,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/>
diff --git a/jnlp-files/worldwind.jnlp b/jnlp-files/worldwind.jnlp
index 452e1e2..816da5f 100644
--- a/jnlp-files/worldwind.jnlp
+++ b/jnlp-files/worldwind.jnlp
@@ -11,9 +11,6 @@
<offline-allowed/>
</information>
<update check="background" policy="always"/>
- <security>
- <all-permissions/>
- </security>
<resources>
<j2se href="http://java.sun.com/products/autodl/j2se" version="1.5+" initial-heap-size="512m"
diff --git a/manifest.mf b/manifest.mf
index e177565..2503898 100644
--- a/manifest.mf
+++ b/manifest.mf
@@ -8,5 +8,5 @@ Implementation-Commit: @SCM_COMMIT@
Implementation-Vendor: JogAmp Community
Implementation-URL: http://jogamp.org/
Implementation-Vendor-Id: com.jogamp
-Permissions: all-permissions
+Permissions: sandbox
@JAR_CODEBASE_TAG@
--
cgit v1.2.3