PPT Slide

Smuggling Matryoska Dolls

OK. Fly

back to

Moscow

and make

a file

called

“java.policy”

7.

Bash % rmiregistry &

[5] Pid 4523

Bash % unset CLASSPATH

Bash % java -Djava.security.policy=java.policy

DollImplementation &

[6] Pid 4524

Bash %

grant {

permission java.net.SocketPermission

"*:1024-65535", “connect,accept";

permission java.net.SocketPermission

"*:80", "connect";

};

Set the policy

file on startup

with the -D

option, or else!

Previous slide

Next slide

Back to first slide

View graphic version