Java 1.2 security model exitVM permission not respected

Question

Hi all,
I am trying to configure a jvm to run class files in a very restricted
sandbox. I created a policy file (xmud.policy) that allowed minimal
permissions and then executed the jmv with the following command:
java -Djava.security.manager -Djava.security.policy==xmud.policy
org.xmud.test.hello
The program hello.java executed a System.exit(1)
Although the file xmud.policy does not grant exitVM permission to the
application it can exit with no problems. If I run the program with:
-Djava.security.debug=access
I can see that access is granted for exitVM with no problem.
The only way for disallowing exitVM is to subclass SecurityManager and have
my custom class throw an exception on checkExit.
Shouldn't the policy file disallow exitVM with the default Security Manager?
I get the same problem with getClassLoader.
The policy file is:
grant codeBase "file:/e:/corba_projects_exe/-" {
permission java.util.PropertyPermission "java.io.tmpdir", "read";
permission java.io.FilePermission "e:\\-", "read, write, delete, execute";
Thanks

Answer 1

From the jdk1.4 API documentation for java.lang.RuntimePermission the following can be found:
"Note: The "exitVM" permission is automatically granted to all code loaded from the application class path, thus enabling applications to terminate themselves."
I hope that helps.
/Hans