Java 飞行记录器 : Does it need JMX readwrite access or is readonly enough?

Question

JMX 允许您在名为 jmxremote.access 的文件中为用户设置访问权限。 (您可以在 <JAVA INSTALL>/jre/lib/management 中找到模板)。在那里你可以为每个用户指定如果用户有..

   "readonly" grants access to read attributes of MBeans.
               For monitoring, this means that a remote client in this
               role can read measurements but cannot perform any action
               that changes the environment of the running program.

或者..

   "readwrite" grants access to read and write attributes of MBeans,
               to invoke operations on them, and optionally
               to create or remove them. This access should be granted
               only to trusted clients, since they can potentially
               interfere with the smooth operation of a running program.

..权限。

现在，我想为我通过 JMC 使用的 JXM 用户激活此访问控制功能，以访问飞行记录器数据 -- 以赋予该用户尽可能少的权限，按照默认的安全标准。

--> 给用户readonly就够了吗？权限还是 Java Flight Recorder 也需要在某处写东西？

Answer 1

JFR 需要一些特定的读写权限:

your-role-name-goes-here readwrite \
  create com.sun.management.*,com.oracle.jrockit.* \
  unregister

回答来自: https://community.oracle.com/thread/2588377