[rfc][icedtea-web] RH982558 - proxy PAC support does not work

[Andrew Azores]

On 07/20/2013 09:54 AM, Jiri Vanek wrote:
> On 07/19/2013 09:55 PM, Andrew Azores wrote:
>> Changelog:
>> * netx/net/sourceforge/jnlp/runtime/RhinoBasedPacEvaluator.java 
>> (getProxiesWithoutCaching): added read property permission for 
>> java.vm.name
>>
>> Proxy PAC wasn't working in Fedora 19 because Rhino initialization 
>> was being stopped due to missing read permission on java.vm.name 
>> property. Since Rhino couldn't start, the PAC file wasn't parsed, and 
>> the proxy setting fell back to direct connect.
>>
>> Andrew A
>
> This looks surprisingly simply....
> I was in temptation to share somehow the Permissions from 
> SecurityDesc. Unless you think it is good idea to share whole, or some 
> pars of permissions then I'm ok for head.
> I guess this is necessary also for 1.4?
>
> J.

This is the only permission that's needed to get Rhino and PAC settings 
working again, as far as I can tell. We could grant other permissions as 
well but I don't see that there's any need to grant permissions that 
this chunk of code doesn't actually need in order to run.

I haven't tested many combination of OS and ITW versions - just Fedora 
18/19 and ITW 1.4/head. The bug appears in Fedora 19 with either 1.4 or 
head, but doesn't appear at all in Fedora 18.

Andrew A