Java SecurityManager checkConnect() Method

---

---

Description

The Java SecurityManager checkConnect(String host, int port, Object context) method Throws a SecurityException if the specified security context is not allowed to open a socket connection to the specified host and port number. A port number of -1 indicates that the calling method is attempting to determine the IP address of the specified host name.

If context is not an instance of AccessControlContext then a SecurityException is thrown. Otherwise, the port number is checked. If it is not equal to -1, the context's checkPermission method is called with a SocketPermission(host+":"+port,"connect") permission. If the port is equal to -1, then the context's checkPermission method is called with a SocketPermission(host,"resolve") permission.

If you override this method, then you should make a call to super.checkConnect at the point the overridden method would normally throw an exception.

Declaration

Following is the declaration for java.lang.SecurityManager.checkConnect() method

public void checkConnect(String host, int port, Object context)

Parameters

• host − the host name port to connect to.

• port − the protocol port to connect to.

• context − a system-dependent security context.

Return Value

This method does not return a value.

Exception

• SecurityException − if the specified security context is not an instance of AccessControlContext (e.g., is null), or does not have permission to open a socket connection to the specified host and port.

• NullPointerException − if the host argument is null.

Example

Our examples require that the permissions for each command is blocked. A new policy file was set that allows only the creating and setting of our Security Manager. The file is in C:/java.policy and contains the following text −

grant {
   permission java.lang.RuntimePermission "setSecurityManager";
   permission java.lang.RuntimePermission "createSecurityManager";
   permission java.lang.RuntimePermission "usePolicy";
};

The following example shows the usage of lang.SecurityManager.checkConnect() method.

package com.tutorialspoint;

import java.security.AccessControlContext;
import java.security.AccessController;

public class SecurityManagerDemo {

   public static void main(String[] args) {

      // get the current calling context
      AccessControlContext acc = AccessController.getContext();

      // set the policy file as the system securuty policy
      System.setProperty("java.security.policy", "file:/C:/java.policy");

      // create a security manager
      SecurityManager sm = new SecurityManager();

      // set the system security manager
      System.setSecurityManager(sm);

      // perform the check
      sm.checkConnect("www.tutorialspoint.com", 8080, acc);

      // print a message if we passed the check
      System.out.println("Allowed!");
   }
}

Output

Let us compile and run the above program, this will produce the following result −

Exception in thread "main" java.lang.UnsupportedOperationException: The Security Manager is deprecated and will be removed in a future release
	at java.base/java.lang.System.setSecurityManager(System.java:430)
	at com.tutorialspoint.SecurityManagerDemo.main(SecurityManagerDemo.java:14)

Note − Security Manager has been deprecated since version 17 and marked for removal.