RFR: 8292177: InitialSecurityProperty JFR event

Sean Mullan mullan at openjdk.org
Tue Sep 27 20:35:21 UTC 2022


On Thu, 22 Sep 2022 15:57:56 GMT, Sean Coffey <coffeys at openjdk.org> wrote:

> New JFR event to record state of initial security properties.
>  
> Debug output is also now added for these properties via -Djava.security.debug=properties

src/jdk.jfr/share/classes/jdk/jfr/internal/instrument/JDKEvents.java line 312:

> 310:     }
> 311: 
> 312:     private static void emitInitialSecurityProperties() {

Is the `Security` class loaded and have the properties always been populated at this point? ProtectionDomain` doesn't reference the `Security` class AFAICT.

src/jdk.jfr/share/conf/jfr/default.jfc line 713:

> 711: 
> 712:     <event name="jdk.InitialSecurityProperty">
> 713:       <setting name="enabled">true</setting>

The other security related events are not enabled by default. Is this one enabled because it is only generated once? It seems it may still have some startup overhead because AFAIU it forces a load of security properties even if they are never accessed? Perhaps I don't fully understand how this event works though.

-------------

PR: https://git.openjdk.org/jdk/pull/10394



More information about the security-dev mailing list