Disallow java program to execute external command

Question

How to disallow java program to execute some external command.
Thank.

Answer 1

It work by using custom policy, thank
Test.java
        String command1[] = {"/bin/ls","-a,","-l"};
        String command2[] = {"/bin/pwd"};
        Runtime runtime = Runtime.getRuntime();
        try{
            Process p1 = runtime.exec(command1);
            Process p2 = runtime.exec(command2); // AccessControlException: access denied
            Scanner s1 = new Scanner(p1.getInputStream());
            Scanner s2 = new Scanner(p2.getInputStream()); 
            System.out.println(s1.nextLine());
            System.out.println(s2.nextLine()); 
        }catch(Exception ex){
           ex.printStackTrace();
        }java.policy
grant{
   permission java.io.FilePermission "/bin/ls", "execute";
}Run
$java -Djava.security.manager -Djava.security.policy=java.policy Test
java.security.AccessControlException: access denied (java.io.FilePermission /bin/pwd execute)