# java: the "write" policy, with the JDK JAVA_HOME names and the user
# preferences in ~/.java, and no network. javac, jar and jshell include
# it. policies/commands/java.policy in blinker's config directory comes
# first.

# type  access  pattern
include write
file    read    $JAVA_HOME
file    write   ~/.java/

env     allow   JAVA_HOME
env     allow   JAVA_TOOL_OPTIONS
env     allow   JDK_JAVA_OPTIONS
env     allow   CLASSPATH