How do I get an extended SecurityManager to handle privileged code?

Question

Hi.
I have written my own SecurityManager which asks if the user wants to allow the action before denying it. It also offers to write the whole permission into the current policy file.
The problem I have is that I can't get the securitymanager to handle privileged code. At the moment I get the call stack and check which classes that doesn't have the permission, check their codebase and write the permission to that codebase. But that will fail if any code is privileged.
So what I need is to get some information about those protection domains that are marked privileged, and it seems that the only way to get that is by using DomainCombiner.
But it doesn't seem to work at all, thinking that it might have something to do with that I have to run the critical code in my security manager as privileged, and that I do something wrong when I am extracting the DomainCombiner.
Well, I hope you understand my problem and that someone have some nice idea about how to do it in a clean nice way.
best regards,
Fredrik

Answer 1

Might be better if I post the whole code, it aint that big.
package tddc03;
public class SecMan2 extends SecurityManager { 
    private static String separator = System.getProperty("file.separator");
    public SecMan2() {
         super();
    public void checkPermission(final Permission perm) {
     try {
         super.checkPermission(perm);
     catch (final SecurityException se) {
         System.out.println("Securityexception caught: " + se.getMessage());
         System.out.println("Would you like to: 1. Allow once, 2. Allow everytime, 3. Deny?");
         try {
          char res = (char)System.in.read();
          /*Read until end of line, or eof. to descard anything other then the first character*/
          char tmp;
          int readItem;
          do {
              tmp = (char) (readItem = System.in.read());
          }  while ( tmp != '\n' && readItem != -1 );
          if ((res != '1') && (res != '2')) {
              System.out.println("deny!");
              throw se;
          else if (res == '2')
               /*Well, we need to make the handleException() code to run as privileged code
                * since it need access to resources that the caller shouldn't have access to.
                * The code that runs marked as privileged only rely on its own permission, so
                * we can give this package the permission to write to the policy file without giving
                * it to the program that is running*/
                try {
                    AccessController.doPrivileged(
                                   new PrivilegedExceptionAction() {
                                       public Object run() throws SecurityException {
                                                  handleException(se, perm);
                                                  return null;
                } catch (PrivilegedActionException e) {
                    throw (SecurityException) e.getException();
         } catch (IOException ioe) {
              System.out.println("IOException on input:" + ioe.getMessage());
              throw se;
     catch (Exception e) {
         System.out.println("Exception caught :" + e.getMessage());
         e.printStackTrace();
    private void handleException(SecurityException e, final Permission perm) {
     String provider;
     Vector<String> codebase = new Vector();
     /*if you only using your own policy file, there will be one '=' infront of the
       searchpath which we have to remove*/
     provider = System.getProperty("java.security.policy");     
     provider = provider.replaceFirst("=","");     
     /*this means we have to use the default one.*/
     if (provider == null)
         provider = System.getProperty("java.home") + separator +"lib"
          + separator +"security"+separator+"java.policy";
     //codebase = "file:" + System.getProperty("user.dir") + separator + "-";
     Class[] classes = getClassContext();
     ProtectionDomain pd = null;
     for(int i=0; i < classes.length; i++) {
         pd = classes.getProtectionDomain();
     if (pd.implies(perm) == true) {
                    System.out.println(i + ". " + classes[i].toString());
     else {
                    System.out.print(i + ". " + classes[i].toString()+ "[");
                    System.out.println(pd.getCodeSource().getLocation().toString() + "]");
                    codebase.add(pd.getCodeSource().getLocation().toString());
     final File policy_file = new File(provider);
     final PolicyParser parser = new PolicyParser();
     PolicyParser.PermissionEntry perm_entry;
     PolicyParser.GrantEntry grant_entry;
     //Traverse the exception message to get the specs for the new permission
     String perm_type, perm_action, perm_param;
     try {
     //We need to get the data from the exception message, so we will split it up.
     String temp[] = e.getMessage().split("[()]",3);
     temp = temp[1].split("\\s",3);
     perm_type = temp[0];
     perm_param = temp[1];
     if (temp.length > 2)
          perm_action = temp[2];
     else
          perm_action = "";
     perm_entry = new PolicyParser.PermissionEntry(perm_type, perm_param, perm_action);
     FileReader p_reader = new FileReader(policy_file);
     parser.read(p_reader);
     p_reader.close();
     //Travers all grants, looking for the current codeBase
     PolicyParser.GrantEntry list_entry;
     Enumeration elements;
     for(Enumeration ec = codebase.elements(); ec.hasMoreElements();) {
          elements = parser.grantElements();
          grant_entry= new PolicyParser.GrantEntry();
          grant_entry.codeBase = (String) ec.nextElement();
          while(elements.hasMoreElements()) {
          list_entry = (PolicyParser.GrantEntry) elements.nextElement();
          //If null == null or codeBase == codeBase
          if (grant_entry.codeBase.equals(list_entry.codeBase)) {
               list_entry.add(perm_entry);
               //To mark that the entry was successfully found
               grant_entry = null;
               break;
          if (grant_entry != null) {
          grant_entry.add(perm_entry);
          parser.add(grant_entry);
     FileWriter p_writer = new FileWriter(policy_file);
     parser.write(p_writer);
     p_writer.close();
     Policy.getPolicy().refresh();
     } catch (IOException ioe) {
     System.out.println("IOException caught:" + ioe.getMessage());
     } catch (ParsingException pe) {
     System.out.println("ParsingException caught:" + pe.getMessage());
     } catch (Exception ex) {
     System.out.println("Exception caught:" + ex.getMessage());