Questions on deprivileging a module

Alan Bateman Alan.Bateman at oracle.com
Tue Jul 5 08:07:44 UTC 2016


On 05/07/2016 09:03, Remi Forax wrote:

> The other solution is to use a VarHandle instead of Unsafe for setting the final field,
> i don't think that letting unprivileged module to access to Unsafe is a good idea.
>
Very true, I wasn't paying attending to why it is using Unsafe in the 
first place. That said, the context seems to be a standard (=platform) 
module rather than a user module.

-Alan



More information about the security-dev mailing list