t various permissions to a specific service. permission org.tanukisoftware.wrapper.security.WrapperServicePermission "myservice", "interrogate"; permission org.tanukisoftware.wrapper.security.WrapperServicePermission "myservice", "interrogate,start,stop"; permission org.tanukisoftware.wrapper.security.WrapperServicePermission "myservice", "userCode"; permission org.tanukisoftware.wrapper.security.WrapperServicePermission "myservice", "*"; // Grant various permissions to any service starting with "my". permission org.tanukisoftware.wrapper.security.WrapperServicePermission "my*", "*"; // Let the calling code do anything to any service on the system permission org.tanukisoftware.wrapper.security.WrapperServicePermission "*", "*"; permission org.tanukisoftware.wrapper.security.WrapperServicePermission "*"; };
Possible actions include the following:
| Permission Action Name | What the Permission Allows | Risks of Allowing this Permission |
| start | Start a service which is installed but has not been started. | Malicious code could potentially start any service that is not currently running. This includes services which were previously stopped or that are configured to be started manually. Many Windows systems have several services stopped by default because of the security hazards that they pose. Starting such services could open the system up to attacks related to that service. |
| stop | Stop a service which is currently running. | Malicious code could potentially stop running service. This could result in a denial of service attack if the service is a web or database server. Or it result in more dangerous attacks if the service is a firewall or virus scanner. |
| pause | Pause a service which is currently running. | Malicious code could potentially pause running service. This could result in a denial of service attack if the service is a web or database server. Or it result in more dangerous attacks if the service is a firewall or virus scanner. |
| continue | Continue a service which was previously paused. | Malicious code could resume services which had been paused for a good reason. |
| interrogate | Interrogate a service as to its current state. | Malicious code learn a lot about a system and its weakness by probing which services are currently running. |
| userCode | Send any custom user code to a service. | The danger of this action depends on whether or not the service understands custom user codes, and what it does with them. This could potentially be a very dangerous permission to grant. |
@author Leif Mortenson