How to accept resolv on all hosts?

Question

Hi,
My web application is running under a security policy and I don't know how to write a rule to allow the application to resolve all host names. Is it possible to write a policy rule like:
grant codeBase "file:/usr/local/webapps/myapp/-" {
    permission java.net.SocketPermission "*", "resolve";
};According to the SocketPermission javadoc, the "*" is only allowed at the left of a domain suffix and this former syntax is not supported.
How can I write such a rule?
Thanks for any hint.

Answer 1

You are perfectly right! Looking at the source code for SocketPermission, at least for JDK1.5:
     // is this a domain wildcard specification
     if (host.lastIndexOf('*') > 0) {
         throw new
            IllegalArgumentException("invalid host wildcard specification");
     } else if (host.startsWith("*")) {
         wildcard = true;
         if (host.equals("*")) {
          cname = "";
         } else if (host.startsWith("*.")) {The conclusion: never trust javadoc, but experiment!
Thanks.