RFR: JDK-8028215 - ORB.init fails with SecurityException if properties select the JDK default ORB

[Alan Bateman]

On 14/11/2013 21:37, Mark Sheppard wrote:
> Hi,
>    please oblige and review the following fix
>
> http://cr.openjdk.java.net/~msheppar/8028215/webrev/
>
> which addresses the issue detailed in
>
> https://bugs.openjdk.java.net/browse/JDK-8028215
>
> This addresses an ORB initialization problem, which has arisen when the
> com.sun.corba.se.** packages were added to the restricted package list.
Thanks for taking this one, I didn't think of this (I assume rare) usage 
when adding com.sun.corba.se.** to the restricted package list.

The change makes the assumption that if the application asks for 
"com.sun.corba.se.impl.orb.ORBSingleton" then it really means the ORB 
implementation that is included with the JDK, I guess that should be okay.

For the test then is the policy file needed? I would think the default 
policy file should be okay. I'm also curious why it is named 
java.policy.applet. One thing that the test could additionally check is 
that orb.getClass() is of the expected type.

-Alan