RFR: 8148188: Enhance the security libraries to record events of interest

[Weijun Wang]

Confused. Aren't all Security properties security-related? This is not about normal system properties.

And the method name in the latest webrev is "isSecurityProperty" without the "JDK" word. I assume this means you don't care about the difference between SE properties and JDK properties.

--Max

> On Nov 14, 2018, at 2:53 AM, Sean Mullan <sean.mullan at oracle.com> wrote:
> 
> * src/java.base/share/classes/java/security/Security.java
> 
> The isJdkSecurityProperty method could return false positives, for example there may be a non-JDK property starting with "security.". I was thinking it would be better to put all the JDK property names in a HashSet which is populated by the static initialize() method, and only if event logging is enabled. Then setProperty can just check if the property name is in this set.