MaxCompute MapReduce and user-defined functions (UDFs) that run in distributed mode are limited by Java sandboxes. The main function of MapReduce is not subject to the limits of Java sandboxes.

Limits on the use of Java sandboxes

  • Direct access to local files is not allowed. You can access files only by using interfaces provided by MaxCompute MapReduce and MaxCompute Graph. This limit applies to the following data:
    • Resources specified by the resources option, including resource files, JAR packages, and resource tables.
    • Logs generated by System.out and System.err. You can run the Log command on the MaxCompute client to view logs.
  • Direct access to distributed file systems is not allowed. You can use only MaxCompute MapReduce or MaxCompute Graph to access tables.
  • Java Native Interface (JNI) calls are not allowed.
  • Java threads cannot be created. Linux commands cannot be executed by using sub-threads.
  • Network access operations, such as acquiring local IP addresses, are not allowed.
  • Limits on Java reflection: The suppressAccessChecks permission is prohibited. You cannot set a private attribute or method accessible to read private attributes or call private methods.

Limits on access to local files

If you use the following methods to access a local file, the access denied exception is reported:
  • java.io.File 
    public boolean delete()
public void deleteOnExit()
public boolean exists()
public boolean canRead()
public boolean isFile()
public boolean isDirectory()
public boolean isHidden()
public long lastModified()
public long length()
public String[] list()
public String[] list(FilenameFilter filter)
public File[] listFiles()
public File[] listFiles(FilenameFilter filter)
public File[] listFiles(FileFilter filter)
public boolean canWrite()
public boolean createNewFile()
public static File createTempFile(String prefix, String suffix)
public static File createTempFile(String prefix,  String suffix,File directory)
public boolean mkdir()
public boolean mkdirs()
public boolean renameTo(File dest)
public boolean setLastModified(long time)
public boolean setReadOnly()
  • java.io.RandomAccessFile 
    RandomAccessFile(String name, String mode)
RandomAccessFile(File file, String mode)
  • java.io.FileInputStream 
    FileInputStream(FileDescriptor fdObj)
FileInputStream(String name)
FileInputStream(File file)
  • java.io.FileOutputStream 
    FileOutputStream(FileDescriptor fdObj)
FileOutputStream(File file)
FileOutputStream(String name)
FileOutputStream(String name, boolean append)
  • java.lang.Class 
    public ProtectionDomain getProtectionDomain()
  • java.lang.ClassLoader 
    ClassLoader()
ClassLoader(ClassLoader parent)
  • java.lang.Runtime 
    public Process exec(String command)
public Process exec(String command, String envp[])
public Process exec(String cmdarray[])
public Process exec(String cmdarray[], String envp[])
public void exit(int status)
public static void runFinalizersOnExit(boolean value)
public void addShutdownHook(Thread hook)
public boolean removeShutdownHook(Thread hook)
public void load(String lib)
public void loadLibrary(String lib)
  • java.lang.System 
    public static void exit(int status)
public static void runFinalizersOnExit(boolean value)
public static void load(String filename)
public static void loadLibrary( String libname)
public static Properties getProperties()
public static void setProperties(Properties props)
public static String getProperty(String key) // Only some keys are allowed for access to the file.
public static String getProperty(String key, String def) // Only some keys are allowed for access to the file.
public static String setProperty(String key, String value)
public static void setIn(InputStream in)
public static void setOut(PrintStream out)
public static void setErr(PrintStream err)
public static synchronized void setSecurityManager(SecurityManager s)
    Keys supported by System.getProperty: 
    java.version
java.vendor
java.vendor.url
java.class.version
os.name
os.version
os.arch
file.separator
path.separator
line.separator
java.specification.version
java.specification.vendor
java.specification.name
java.vm.specification.version
java.vm.specification.vendor
java.vm.specification.name
java.vm.version
java.vm.vendor
java.vm.name
file.encoding
user.timezone
  • java.lang.Thread 
    Thread()
Thread(Runnable target)
Thread(String name)
Thread(Runnable target, String name)
Thread(ThreadGroup group, ...)
public final void checkAccess()
public void interrupt()
public final void suspend()
public final void resume()
public final void setPriority (int newPriority)
public final void setName(String name)
public final void setDaemon(boolean on)
public final void stop()
public final synchronized void stop(Throwable obj)
public static int enumerate(Thread tarray[])
public void setContextClassLoader(ClassLoader cl)
  • java.lang.ThreadGroup 
    ThreadGroup(String name)
ThreadGroup(ThreadGroup parent, String name)
public final void checkAccess()
public int enumerate(Thread list[])
public int enumerate(Thread list[], boolean recurse)
public int enumerate(ThreadGroup list[])
public int enumerate(ThreadGroup list[], boolean recurse)
public final ThreadGroup getParent()
public final void setDaemon(boolean daemon)
public final void setMaxPriority(int pri)
public final void suspend()
public final void resume()
public final void destroy()
public final void interrupt()
public final void stop()
  • java.lang.reflect.AccessibleObject 
    public static void setAccessible(...)
public void setAccessible(...)
  • java.net.InetAddress 
    public String getHostName()
public static InetAddress[] getAllByName(String host)
public static InetAddress getLocalHost()
  • java.net.DatagramSocket 
    public InetAddress getLocalAddress()
  • java.net.Socket 
    Socket(...)
  • java.net.ServerSocket 
    ServerSocket(...)
public Socket accept()
protected final void implAccept(Socket s)
public static synchronized void setSocketFactory(...)
public static synchronized void setSocketImplFactory(...)
  • java.net.DatagramSocket 
    DatagramSocket(...)
public synchronized void receive(DatagramPacket p)
  • java.net.MulticastSocket 
    MulticastSocket(...)
  • java.net.URL 
    URL(...)
public static synchronized void setURLStreamHandlerFactory(...)
java.net.URLConnection
public static synchronized void setContentHandlerFactory(...)
public static void setFileNameMap(FileNameMap map)
  • java.net.HttpURLConnection 
    public static void setFollowRedirects(boolean set)
java.net.URLClassLoader
URLClassLoader(...)
  • java.security.AccessControlContext 
    public AccessControlContext(AccessControlContext acc, DomainCombiner combiner)
public DomainCombiner getDomainCombiner()