--- java/drda/org/apache/derby/drda/server.policy	(revision 1825268)
+++ java/drda/org/apache/derby/drda/server.policy	(working copy)
@@ -182,9 +172,9 @@
   permission java.util.PropertyPermission "java.runtime.version", "read";
   permission java.util.PropertyPermission "java.fullversion", "read";
   permission java.lang.RuntimePermission "getProtectionDomain";
-  permission java.io.FilePermission "<<ALL FILES>>", "read";
   permission java.io.FilePermission "java.runtime.version", "read";
   permission java.io.FilePermission "java.fullversion", "read";
+  permission java.io.FilePermission "${derby.install.path}${/}-", "read";
 
   permission org.apache.derby.shared.common.security.SystemPermission "engine", "usederbyinternals";
 };
