Low level hooks in JDK for instrumentation of permission checks.

Alan Bateman Alan.Bateman at oracle.com
Thu Jun 10 13:55:10 UTC 2021


On 10/06/2021 07:40, Peter Firmstone wrote:
>
> Just a quick question, would it be possible that some JFR hooks might 
> also be useable for an authorisation layer?
>
>
JFR events can't be used to intercept/veto operations, assuming that is 
what you are asking. However, it might be that JFR events are monitored 
as part of some overall security approach that takes into account events 
recorded for health, performance, or troubleshooting purposes.

-Alan



More information about the security-dev mailing list