RFR: 8168078: Remove permission to read all system properties granted to the jdk.crypto.ec module
Sean Mullan
sean.mullan at oracle.com
Mon Oct 17 21:18:36 UTC 2016
I had to make a small update to the webrev to PKCS11Test.java because
the TestEC test failed on Windows. Some deployment-specific security
providers will throw a ServiceConfigurationError if not granted the
right permissions. These permissions may not be configured correctly and
are outside the scope of the jdk.crypto.ec module, so the exception is
ignored. (This is the same way we load providers in
sun.security.jca.ProviderConfig)
new webrev: http://cr.openjdk.java.net/~mullan/webrevs/8168078/webrev.01/
Thanks,
Sean
On 10/17/2016 11:10 AM, Xuelei Fan wrote:
> Looks fine to me.
>
> Xuelei
>
> On 10/17/2016 10:51 PM, Sean Mullan wrote:
>> Please review this fix to remove granting the unnecessary
>> PropertyPermission to the jdk.crypto.ec module:
>>
>> http://cr.openjdk.java.net/~mullan/webrevs/8168078/webrev.00/
>>
>> The existing TestEC test has been modified to also run under a
>> SecurityManager to verify that removing the permission does not break
>> anything.
>>
>> --Sean
More information about the security-dev
mailing list