[9] request for review: 8048147: Privilege tests with JAAS Subject.doAs

Artem Smotrakov artem.smotrakov at oracle.com
Thu Mar 19 11:39:21 UTC 2015


Hi Max,

I agree that sometimes use of a shell script makes a test clearer. On 
the other hand, if we are trying to create pure Java tests, it increases 
overall coverage of Java APIs.

I updated the tests to use ProcessTools, and simplified a little bit 
policy files for negative tests to make them clearer. Please take a look:

http://cr.openjdk.java.net/~asmotrak/8048147/webrev.02/

Artem

On 03/18/2015 06:08 PM, Wang Weijun wrote:
>> On Mar 18, 2015, at 19:31, Artem Smotrakov <artem.smotrakov at oracle.com> wrote:
>>
>> The tests can be updated to start a new process with ProcessTools, or use a script.
> Choose anyone you like.
>
> Maybe you can a few experiments to see what is the difference between a script test and a Java test that launches processes.
>
> I'm a little surprised that with the classpath not pointing to jars the test still succeeds. The jars should have been granted different permissions. Maybe the test is not designed smart enough to detect the problem?
>
> --Max
>
>> Artem




More information about the security-dev mailing list