This project aims to enable the definition of permissions for dependencies in a Java application. This will curtail exploitations of vulnerable dependencies used in an application.
- Clone the repository
- In the cloned repository, run mvn clean package. The built agent jars will be located in the target directory.
- First, modify the sample-permissions.jsonfile with the appropriate permissions if necessary
- Use the argument -javaagent:<path-to-built-agent>when running the java command. You may also need to pass the path to jars containing the ASM and Jackson dependencies.