policyeditor(1)

💅 policyeditor(1) — like, the security policy editor for javaws & the browser plugin

okay so real talk, welcome to the policyeditor page from the General Commands Manual bestie. yes the man page is literally named after the command, iconic behavior, we love a self-titled moment 👑

---

🌸 NAME 🌸

policyeditor — view and modify security policy settings for javaws and the browser plugin 🎀

✨ SYNOPSIS ✨

policyeditor
policyeditor [-file] policy_file

💖 DESCRIPTION 💖

so policyeditor is a GUI application — yes, a whole graphical girlie — with a small amount of command line support, and what she does is let you view and edit applet security policy settings. these are the ones used by the IcedTea-Web implementation of javaws and the browser plugin. she's meant to be a simpler, easier to use, and more accessible alternative to the standard JDK Policy Tool, which is the whole vibe. 🦋

admin girlies and power users who need fine grained control over policy files should probably use Policy Tool instead of PolicyEditor. no cap, that's just the tea.

if you run her with no arguments at all, no file gets opened, and when you go to save, you'll get a prompt asking where to save it. ngl that's kind of the default main character energy. otherwise, if a file path is given as a command line argument, then that file path gets opened and parsed as a policy file. periodt. 💅

🔥 OPTIONS 🔥

• -codebase url — specifies an applet codebase URL. this can be used with the other selector options to select a policy entry upon opening the editor; if no such identifier exists then it will be created and then selected. (Exactly one argument expected) ⭐
• -defaultfile — specifies that the default user-level policy file should be opened. this is the file which is normally used by IcedTea-Web to make decisions about custom policies and permissions for applets at runtime, unless configured otherwise. (No argument expected) 🧚
• -file policy_file — specifies a policy file path to open. if exactly one argument is given, and it is not this flag, it is interpreted as a file path to open, as if this flag was given first. this flag exists mostly for compatibility with Policy Tool. (Exactly one argument expected) 🫶
• -help — prints out information about supported command and basic usage. (No argument expected) 💖
• -principals class_name principal_name — specifies class name/principal name pairs (space-separated) for the policy entry identifier. this can be used with the other selector options to select a policy entry upon opening the editor; if no such identifier exists then it will be created and then selected. (Expected even number of arguments with param=value as valid argument) 🌈
• -signedby certificate_alias — specifies a certificate alias for a certificate stored in the keystore. this can be used with the other selector options to select a policy entry upon opening the editor; if no such identifier exists then it will be created and then selected. (Exactly one argument expected) 🎀
• -verbose — enable verbose output. (No argument expected) 💀

🦋 EXAMPLES 🦋

• policyeditor — show the GUI editor with no file opened. 💜
• policyeditor -file $XDG_CONFIG_HOME/icedtea-web/security/java.policy — show GUI and opens the default policy file. ✨

🌟 FILES 🌟

• $XDG_CACHE_HOME/icedtea-web/cache/recently_used — additional information about items in cache 🍓
• $XDG_CONFIG_HOME/icedtea-web/security/java.policy — contains granted permissions for selected unsigned apps. controlled by deployment.user.security.policy 👑

where $XDG_CONFIG_DIR, $XDG_CACHE_DIR and $XDG_RUNTIME_DIR are set as ~/.config, ~/.cache and /tmp or /var/tmp if not set. 🫶

😭 BUGS 😭

there aren't any known bugs. truly flawless, we stan. but if you come across one, please file it at:

• http://icedtea.classpath.org/wiki/IcedTea-Web#Filing_bugs
• http://icedtea.classpath.org/bugzilla

please run in debug (-verbose switch or itweb-settings setting or ICEDTEAPLUGIN_DEBUG variable set to true) mode and include that output (best is from java console) with URL to jnlp or html file (or the jnlp/html file or application itself) when filing out the bug report. like, give us the receipts bestie, it makes the fix so much faster 💀🙈

👑 AUTHOR 👑

the following people have made contributions to this project. please keep this list in alphabetical order. 💖

• Lillian Angel <langel@redhat.com>
• Andrew Azores <aazores@redhat.com>
• Deepak Bhole <dbhole@redhat.com>
• Laurent Bourgès <bourges.laurent@gmail.com>
• Adam Buchta <adbuch7@gmail.com>
• Ricardo Martín Camarero <rickyepoderi@yahoo.es>
• Marcin Cieslak <marcin.cieslak@gmail.com>
• Danesh Dadachanji <ddadacha@redhat.com>
• Adam Domurad <adomurad@redhat.com>
• Lukasz Dracz <ldracz@redhat.com>
• Thomas Fitzsimmons <fitzsim@redhat.com>
• Olesya Gerasimenko <gammaray@basealt.ru>
• Michał Górny <mgorny@gentoo.org>
• Mark Greenwood <mark@dcs.shef.ac.uk>
• Tereza Hlavackova <hlavackova.tereza@gmail.com>
• Lars Herschke <lhersch@dssgmbh.de>
• Peter Hatina <phatina@redhat.com>
• Andrew John Hughes <ahughes@redhat.com>
• Jie Kang <jkang@redhat.com>
• Alex Kashchenko <akashche@redhat.com>
• Matthias Klose <doko@ubuntu.com>
• Alexandr Kolouch <skolnag@gmail.com>
• Jan Kmetko <jan.kmetko.ml@gmail.com>
• Francis Kung <fkung@redhat.com>
• Denis Lila <dlila@redhat.com>
• DJ Lucas <dj@lucasit.com>
• Omair Majid <omajid@redhat.com>
• Jon A. Maxwell <jmaxwell@users.sourceforge.net>
• Thomas Meyer <thomas@m3y3r.de>
• Kurt Miller <kurt@intricatesoftware.com>
• Saad Mohammad <smohammad@redhat.com>
• Martin Olsson <martin@minimum.se>
• Stefan Ring <stefan@complang.tuwien.ac.at>
• Ville Skyttä <ville.skytta@iki.fi>
• Fridrich Strba <fridrich.strba@suse.com>
• Andrew Su <asu@redhat.com>
• Joshua Sumali <jsumali@redhat.com>
• Joel Tesdall <jtesdall@mapcon.com>
• Michal Vala <mvala@redhat.com>
• Jiri Vanek <jvanek@redhat.com>
• Tomáš Votava <tomcacolca@gmail.com>
• Mark Wielaard <mark@klomp.org>
• Jacob Wisor <gitne@excite.co.jp>
• Man Lung Wong <mwong@redhat.com>

this project also includes code from the following projects: 🧚

• OpenJDK <http://openjdk.java.net/>
• Netx <http://jnlp.sourceforge.net/netx/>

⭐ SEE ALSO ⭐

icedtea-web(1) javaws(1) icedtea-web-plugin(1) itweb-settings(1) policyeditor(1) policytool(1) java(1)

• http://icedtea.classpath.org/wiki/IcedTea-Web
• http://icedtea.classpath.org/hg/icedtea-web

---

okay that's the whole page bestie, go edit some policies 💅✨

sign-off szn 🎀 — this beauty is from icedtea-web (build fedora-8.el9-x86_64), dated 2 May 2025, and she's filed under policyeditor(1). luv u, bye 🦋💖