[RFC][icedtea-web] -Xtrustall opinion added

Jiri Vanek jvanek at redhat.com
Sun Jun 26 11:04:42 PDT 2011


Hi!
Attached patch is adding (especially for testing purposes) -Xtrustall parameter for javaws. When javaws is lunched with this parameter, then user is not asked for any security issues, and any necessary steps he had to accept are now trusted.
I believe it is implemented correctly, because running code which need to be signed on signed, but without permissions or unsigned will still fail.
It is worthy to say, that there already existed DeploymentConfiguration.KEY_SECURITY_PROMPT_USER key for deploy configuration, but this one just hiding all security dialogs to user, but thy were then evaluated as untrusted.

Thanx for any comments,
   J.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: xtrustall.diff
Type: text/x-patch
Size: 3047 bytes
Desc: not available
Url : http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20110626/0323deb4/xtrustall.diff 


More information about the distro-pkg-dev mailing list