title: Can a jar file contain a RAT or KeyLogger on Linux?
body: <p>I'm working in a freelancing project with a company which has their own time tracking and screenshoting application.</p>
  
  <p>They've sent me a <code>.jar</code> file which seems to be legit and does what it says. However I'm afraid not lose my accounts or anything in meantime.</p>
  
  <p>I have tried running the jar file with <code>-Djava.security.manager</code> and it crashes like so:</p>
  
  <pre><code>Caused by: java.lang.reflect.InvocationTargetException
  Caused by: java.security.AccessControlException: access denied ("java.util.PropertyPermission" "user.home" "read")
  </code></pre>
  
  <p>Am I safe from keylogging and other things or should I consider working inside a virtual machine for this project?</p>
  
  <p>Is there any way to check?</p>