...
A comprehensive way of handling this issue is to grant the application the permissions to operate only on files present within the intended directory — �€” the user's home directory in this example. This compliant solution specifies the absolute path of the program in its security policy file and grants java.io.FilePermission
with target ${user.home}/*
and actions read
and write
.
...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
IDS02-J | mediumMedium | unlikelyUnlikely | mediumMedium | P4 | L3 |
Automated Detection
Tool | Version | Checker | Description |
---|---|---|---|
Fortify | 1.0 | Path_Manipulation | Implemented |
...