Red Hat Training

A Red Hat training course is available for JBoss Enterprise Application Platform Common Criteria Certification

4.3. Additional Policy File Configuration

Users and administrators may add their own permission blocks to the policy file, however the permissions specified for JBoss Enterprise Application Platform must not be changed; doing so will invalidate the certification.
Any modifications to the security policy that are not documented in this guide will invalidate the certification configuration. Refer to Section 2.5.7, “Guidance on Configuring Java Security Permissions” for additional information on this topic.