Detecting sandbox

Question

Hello!
I would like to detect, if my application is running inside or outside a Java sandbox. Reason: I would like to keep the flexibility to use my application as signed and unsigned Web Start application as well as regular application.
Up to now I use code like this:
import javax.jnlp.*;
boolean runningInSandbox ;
try {
    BasicService bs =
        (BasicService) ServiceManager.lookup("javax.jnlp.BasicService");
    runningInSandbox = true;
} catch (UnavailableServiceException e) {
    runningInSandbox = false;
if (runningInSandbox) {
}Ok, this code seems to work, but I guess, there should be a better way. Is this the "official" documented procedure or does anybody know a better way? (Technically this just checks, if the ServiceManager can find the BasicService; not finding this service doesn't mean, my application is running outside of any sandbox.)
Kind regards,
Marcus.

Answer 1

This is the correct way to determine if your code is running under Java Web Start, however, that is not necessarily the same thing as knowing if the code is running in the sandbox. It is possible to be running
1.) outside of java web start, but with a security manager installed that
implement the sandbox or some other permission collection.
2.) under java web start with j2ee-client-permissions or all-permissions
granted by signing your code and requesting this in the jnlp file.
3.) under java web start with enhanced permissions granted by user or
system-wide policy files.
Although for many applications, the method you describe is enough, the best way to keep flexible code is to check for the specific
permission you want to use before using it:
SecurityManaget sm = System.getSecurityManager();
boolean granted;
try {
if ( sm != null ) {
sm.checkPermission(XXX)
granted = true;
} catch (SecurityException se) {
granted = false;
if (granted) {
// one path if permission is granted
} else {
// another path if not.
/Dietz