Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/puniverse/capsule-secure
Launches a capsule in a Java sandbox
https://github.com/puniverse/capsule-secure
Last synced: 4 days ago
JSON representation
Launches a capsule in a Java sandbox
- Host: GitHub
- URL: https://github.com/puniverse/capsule-secure
- Owner: puniverse
- Created: 2015-08-05T14:39:31.000Z (over 9 years ago)
- Default Branch: master
- Last Pushed: 2015-09-10T11:56:08.000Z (about 9 years ago)
- Last Synced: 2024-04-16T07:14:43.127Z (7 months ago)
- Language: Java
- Homepage: http://capsule.io
- Size: 117 KB
- Stars: 6
- Watchers: 5
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Capsule Secure
A [caplet](https://github.com/puniverse/capsule#what-are-caplets) that sandboxes a [capsule](https://github.com/puniverse/capsule) through a Java security policies resource determined at runtime by the `capsule.security.policy` property (the pathname is relative to the capsule JAR's root).
**This caplet is experimental, and should not yet be relied upon to provide full security**
## Usage
The Gradle-style dependency you need to embed in your Capsule JAR, which you can generate with the tool you prefer (f.e. with plain Maven/Gradle as in [Photon](https://github.com/puniverse/photon) and [`capsule-gui-demo`](https://github.com/puniverse/capsule-gui-demo) or higher-level [Capsule build plugins](https://github.com/puniverse/capsule#build-tool-plugins)), is `co.paralleluniverse:capsule-secure:0.1.0`. Also include the caplet class in your Capsule manifest, for example:
``` gradle
Caplets: MavenCapsule SecureCapsule
```
`capsule-secure` can also be run as a wrapper capsule without embedding it:
``` bash
$ java -Dcapsule.log=verbose -Dcapsule.security.policy=sec.policy -jar capsule-secure-0.1.0.jar my-capsule.jar my-capsule-arg1 ...
```
It can be both run against (or embedded in) plain (e.g. "fat") capsules and [Maven-based](https://github.com/puniverse/capsule-maven) ones.
## Security Notes
* Some basic permissions enabling the usage of [`maven-capsule`](https://github.com/puniverse/capsule-maven) at present are always granted, specifically reading the `CAPSULE_REPOS` and `CAPSULE_LOCAL_REPO` environment variables as well as connecting to Maven Central (https://repo1.maven.org/).
## License
Copyright (c) 2014-2015, Parallel Universe Software Co. and Contributors. All rights reserved.
This program and the accompanying materials are licensed under the terms
of the Eclipse Public License v1.0 as published by the Eclipse Foundation.
http://www.eclipse.org/legal/epl-v10.html