RFR (JAXP) JDK-8067170: Enable security manager on JAXP unit tests

Frank Yuan frank.yuan at oracle.com
Tue Aug 2 10:20:50 UTC 2016


Hi Joe and Daniel

I have finished the rework as your comments, please check http://cr.openjdk.java.net/~fyuan/8067170/webrev.02/

JAXP tests use Policy classes, as well as 3 other patterns provided by JAXPTestUtilities:
1. runWithAllPerm methods, are only used for user setup code, never run jaxp code with them.
2. tryRunWithPolicyManager method, is used to run some test methods with security manager and run the others without security
manager in single test class
3. runWithTmpPermission methods, which may run jaxp code with some limited permissions, those permissions belong to user permissions
and jaxp code won't doPrivileged for them. E.g. PropertyPermission("MyInputFactory", "read") or
FilePermission("/tmp/this/does/not/exist/but/that/is/ok", "read")


Btw, some tests or test methods are disabled or commented sm support temporarily for some known jaxp security bugs.

Thanks
Frank



More information about the core-libs-dev mailing list