FileSystemProvider

Alan Bateman Alan.Bateman at oracle.com
Fri Apr 30 16:17:23 UTC 2021


On 29/04/2021 01:13, Michael Hall wrote:
> :
>
> The error is if -Djava.security.manager and -Djava.security.policy are 
> used in invocation….
>
>
Thanks for the bug report. It's in JBS as JDK-8266345. I think this is 
another case where the PolicyFile code needs to be very defensive as 
opening the policy file is a privileged operation. Also interposing on 
the default file system provider sets up a sandwich where the PolicyFile 
is going through untrusted code to get to the file system. Getting all 
these pieces to work together may require the PolicyFile code to use the 
built-in file system provider directly, needs more investigation.

-Alan


More information about the nio-dev mailing list