Strange behaviour during javaws -about

Omair Majid omajid at redhat.com
Fri Feb 18 07:11:59 PST 2011


On 02/18/2011 09:38 AM, Jiri Vanek wrote:
> Can you anybody check it?
> https://bugzilla.redhat.com/show_bug.cgi?id=677334
>
> regards J

I wanted to thank you for bringing up issues that first-time users are 
likely to run into. First impressions are important and all your points 
are valid.

Andrew Hughes may know more about this than I do, but I dont think we 
want to backport these changes to IcedTea6's netx - IcedTea6's netx is 
mostly receiving security fixes at this point. Most of the actual work 
is being done in icedtea-web. As such, I believe we should fix things in 
icedtea-web (only).

Also, please be careful when making changes to files hosted on 
icedtea.classpath.org - the changes may break javaws. Please discuss 
things on this mailing list first.

As for updating the things that javaws -about shows, that sounds like a 
great idea.

Personally, I dont think running an online application for showing the 
about dialog is a great idea. A user using a particular version of 
icedtea-web would want to see information about that particular version 
(and not the version that just happens to be on icedtea.classpath.org). 
If anything, I think javaws -about should launch the local version about 
about. (This also takes care of the problem that we ship an about.jar 
that's completely unused!)

As for security permissions, I agree that we should remove 
all-permissions it if it's not absolutely necessary.

That said, I do think the permissions are required by the about 
application as it currently stands. 
extra/net/sourceforge/jnlp/about/Main.java contains these two lines:
import net.sourceforge.jnlp.Launcher;
import net.sourceforge.jnlp.runtime.JNLPRuntime;
while JNLPRuntime executes these two lines before about.jnlp gets a 
chance to run:        Security.setProperty("package.access", 

     Security.getProperty("package.access")+",net.sourceforge.jnlp");
So I believe the about application will throw security exceptions on 
start if it does not have full permissions.

Thanks again for raising these issues; even more for volunteering to fix 
them :)

Cheers,
Omair



More information about the distro-pkg-dev mailing list