From f48646393cfe53ff8c7d0960ef57877fb02767df Mon Sep 17 00:00:00 2001
From: Christoph Langer <christoph.langer@sap.com>
Date: Sun, 17 May 2026 15:02:11 +0200
Subject: [PATCH] SapMachine #2218: Fix missing policy permission for zipfs
 symlink support in sapmachine17

(cherry picked from commit 24d0d51e58e2092d491abbc783603352e09bba7d)
---
 src/java.base/share/lib/security/default.policy | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/java.base/share/lib/security/default.policy b/src/java.base/share/lib/security/default.policy
index e9a6b0c502a..089cecef7cd 100644
--- a/src/java.base/share/lib/security/default.policy
+++ b/src/java.base/share/lib/security/default.policy
@@ -218,6 +218,8 @@ grant codeBase "jrt:/jdk.security.jgss" {
 
 grant codeBase "jrt:/jdk.zipfs" {
     permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
+    // SapMachine 2026-04-13: symlink support for zipfs entries in sapext.
+    permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.access";
     permission java.lang.RuntimePermission "fileSystemProvider";
     permission java.lang.RuntimePermission "accessUserInformation";
     permission java.util.PropertyPermission "os.name", "read";