[rfc][icedtea-web] PolicyEditor/temporary permissions for Thread/ThreadGroup access

Andrew Azores aazores at redhat.com
Mon Apr 14 15:44:52 UTC 2014


This patch just adds two new permissions to PolicyEditorPermissions and 
TemporaryPermissions - RuntimePermission with "modifyThread" and 
"modifyThreadGroup". Hopefully this enables more applets to be properly 
run sandboxed, without users having to resort to manually writing a 
custom policy. These are added to the "reflection" group in both places, 
although I'm not sure this is necessarily the best group. It isn't 
really a reflection permission, but it doesn't fit in better anywhere 
else. Do they warrant their own new group for PolicyEditor? How should 
they be bundled up for temporary permissions?


Andrew A

-------------- next part --------------
A non-text attachment was scrubbed...
Name: permissions-tuning.patch
Type: text/x-patch
Size: 8146 bytes
Desc: not available
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20140414/259ba826/permissions-tuning.patch>

More information about the distro-pkg-dev mailing list