RFR: 8303392: Runtime.exec and ProcessBuilder.start should use System logger [v2]

Roger Riggs rriggs at openjdk.org
Mon Mar 6 17:02:26 UTC 2023


On Sun, 5 Mar 2023 06:14:49 GMT, Thomas Stuefe <stuefe at openjdk.org> wrote:

> I think to be even more useful it could make sense to print the current directory the child is started in as well as the env var array, possibly only with a finer logging level.

There are concerns about exposing potentially sensitive information in exceptions and logs.
And it would need to apply to all process arguments, not just directory and environment.
For example, there is a property "jdk.includeInExceptions" that is used to only include detail information if it is set.
Unless specifically enabled, the information such as host names and file names are not exposed.
Restricting the detail to finer grained logging levels might be the/an answer.

-------------

PR: https://git.openjdk.org/jdk/pull/12862


More information about the core-libs-dev mailing list