Initial feedback from Apache Ant users on recent security manager warning messages

Jaikiran Pai jai.forums2013 at gmail.com
Wed Jun 30 06:43:25 UTC 2021


On 30/06/21 12:10 pm, Alan Bateman wrote:
> On 30/06/2021 05:51, Jaikiran Pai wrote:
>>
>> In the case we are dealing with, the class is always 
>> "org.apache.tools.ant.types.Permissions". It will always be loaded by 
>> one single classloader (so classloaded just once). However, multiple 
>> different instances of this class will get created during the 
>> lifetime of the build and each such instance of 
>> org.apache.tools.ant.types.Permissions can/will invoke this 
>> setSecurityManager method.
> If I read this correctly, the caller of setSecurityManager is code in 
> org.apache.tools.ant.types.Permission. There may be many instances of 
> Permissions but from the perspective of setSecurityManager then it's 
> all the same caller Class<?>.

Correct.

-Jaikiran




More information about the security-dev mailing list