
grant {
  permission java.io.FilePermission "${nano.dist.picoture}${/}-", "read";
  permission java.io.FilePermission "${nano.config.picoture}${/}-", "read";
  permission java.io.FilePermission "${java.home}${/}-", "read";

  permission java.io.FilePermission "${picoture.logs.dir}", "read,write,delete";
  permission java.io.FilePermission "${picoture.logs.dir}${/}-", "read,write,delete";
  permission java.io.FilePermission "${java.io.tmpdir}", "read,write";
  permission java.io.FilePermission "${java.io.tmpdir}${/}-", "read,write,delete";

  permission java.lang.RuntimePermission "getClassLoader";
  permission java.lang.RuntimePermission "setContextClassLoader";
  permission java.lang.RuntimePermission "getStackWalkerWithClassReference";
  permission java.lang.RuntimePermission "getenv.*";
  permission java.lang.RuntimePermission "accessDeclaredMembers";
  permission java.lang.reflect.ReflectPermission "suppressAccessChecks";

  permission java.util.PropertyPermission "*", "read,write";

  // localhost networking
  permission java.net.SocketPermission "localhost:1024-", "accept,listen,connect,resolve";
  permission java.net.SocketPermission "127.0.0.1:1024-", "accept,listen,connect,resolve";
  permission java.net.SocketPermission "[::1]:1024-", "accept,listen,connect,resolve";
};
