flag.policy

grant {
    permission java.io.FilePermission "x", "read";
    permission java.util.PropertyPermission "user.dir", "read";
};