[rfc][icedtea-web] RH982558 - proxy PAC support does not work

[Jiri Vanek]

On 07/22/2013 03:25 PM, Andrew Azores wrote:
> On 07/20/2013 09:54 AM, Jiri Vanek wrote:
>> On 07/19/2013 09:55 PM, Andrew Azores wrote:
>>> Changelog:
>>> * netx/net/sourceforge/jnlp/runtime/RhinoBasedPacEvaluator.java (getProxiesWithoutCaching): added
>>> read property permission for java.vm.name
>>>
>>> Proxy PAC wasn't working in Fedora 19 because Rhino initialization was being stopped due to
>>> missing read permission on java.vm.name property. Since Rhino couldn't start, the PAC file wasn't
>>> parsed, and the proxy setting fell back to direct connect.
>>>
>>> Andrew A
>>
>> This looks surprisingly simply....
>> I was in temptation to share somehow the Permissions from SecurityDesc. Unless you think it is
>> good idea to share whole, or some pars of permissions then I'm ok for head.
>> I guess this is necessary also for 1.4?
>>
>> J.
>
> This is the only permission that's needed to get Rhino and PAC settings working again, as far as I
> can tell. We could grant other permissions as well but I don't see that there's any need to grant
> permissions that this chunk of code doesn't actually need in order to run.
>
> I haven't tested many combination of OS and ITW versions - just Fedora 18/19 and ITW 1.4/head. The
> bug appears in Fedora 19 with either 1.4 or head, but doesn't appear at all in Fedora 18.
>
> Andrew A
yup, then go on!

J.