Hitachi

uCosminexus Application Server Security Management Guide


2.2.5 Preventing invalid processing

To prevent invalid processing from being executed on the J2EE server, you can use J2EE server runtime protection provided by the SecurityManager functionality of Java SE.

J2EE server runtime protection enables prevention of the following phenomena:

Note that J2EE server runtime protection is enabled by default. If you do not wish to use it, specify the -nosecurity option in the cjstartsv command that starts the J2EE server.

If you disable J2EE server runtime protection, the setSecurityManager method of java.lang.System cannot be used. If an attempt is made to use this method, J2EE server operations might be affected adversely. Note also that dynamic class loading cannot be used when EJB is called from a corresponding J2EE server process.