IBM WebSphere V5.0 Security - CGISecurity

For example: start with minimal security permissions, then run a test and checkwhich permissions are failing. Add the necessary permissions to the policy filethen run your test again for re-checking. Repeat these steps until you have all thenecessary permissions set. Note that this will only help you to identify thepersmissions you have to set, it will not help to find the right settings for thepermissions.Security Tools for JavaThe Java 2 SDK provides three tools that assist in the deployment of the newsecurity features.For more information refer to the documents under the Java 2 SDK directory in/docs/tooldocs/.Key and certificate management toolkeytool is a key and certificate management utility, similar to IBM’s ikeymanutility. The major difference is that the keytool is only a command line utilitywithout graphical interface; but keytool allows to create certificates for anyDistinguished Name (dn) that you require; unlike ikeyman which has apredefined dn schema. For online help, launch the keytool with the -help option:keytool -helpPolicy file editing toolThe policytool with a nice GUI assists the user in specifying, generating, editing,exporting or importing a security policy. The application can be launched from thecommand line with the policytool command.The policytool utility depends on the keystore that is managed by keytool.JAR signing and Verification toolThe jarsigner tool can be used to digitally sign Java archives (JAR files) and toverify such signetures. The jarsigner tool can be used from the command-line byisuing the jarsigner command.The jarsigner tool depends on the keystore that is managed by keytool.8.5.1 Java 2 security in WebSphereThe WebSphere Application Server V5 also supports the Java 2 security in orderto harden the Java Virtual Machine runtime environment.By default, WebSphere Application Server installs a Java 2 SecurityManager andJava 2 Security is enforced via a default set of policies. The default policies arethose recommended in the J2EE Platform specification.Chapter 8. Programmatic security 203