PRE-RFR: 8177154: Default configuration should disallow loading agents

Mario Torre neugens at redhat.com
Fri Mar 24 12:50:02 UTC 2017


On Fri, Mar 24, 2017 at 12:15 PM, Alan Bateman <Alan.Bateman at oracle.com> wrote:
> I expect it will have to be relaxed at some point to allow root

FWIW, we had the need for such use case in Thermostat and we had to
work around this requirement, Elliot even sent a patch some time ago.
With that said, I do think that it's reasonable that root can't access
to the JVM, nothing should run as root and if you need that, something
smells troubles. I'm not sure, especially in a containerised world,
that this requirement makes sense at all, so I wouldn't relax it.

Cheers,
Mario


More information about the hotspot-runtime-dev mailing list