RFR 8145750: jjs fails to run simple scripts with security	manager turned on
    Sundararajan Athijegannathan 
    sundararajan.athijegannathan at oracle.com
       
    Fri Dec 18 12:55:55 UTC 2015
    
    
  
inline comments below..
On 12/18/2015 6:22 PM, Alan Bateman wrote:
>
>
> On 18/12/2015 12:23, Sundararajan Athijegannathan wrote:
>> Please review http://cr.openjdk.java.net/~sundar/8145750/webrev.00/ 
>> for https://bugs.openjdk.java.net/browse/JDK-8145750
>>
>> Adding missing permissions for jdk.dynalink module. Note that it used 
>> to be part of jdk.scripting.nashorn module in the past and therefore 
>> got AllPermission.
> Is it really necessary to grant it AllPermission? Just wondering how 
> hard it would be to figure out the permissions that it really needs.
May be, not. But I tried giving only sun.reflect package access -- 
didn't work. There are a few doPrivileged blocks in dynalink code as 
well. This needs further analysis.
But dynalink code was part of nashorn and so was getting AllPermission 
so far - so there is no permission enhancement by adding this missing 
permission block.
That said, we can revisit reduced permission set for dynalink module. 
I'd prefer to track that as separate bug.
> If test/tools/jjs is new then it would be good to this test directory 
> into one of the test groups so that the tests are run, maybe jdk_other.
okay, I'll find out that.
-Sundar
> -Alan
    
    
More information about the nashorn-dev
mailing list