RFR: 8302819: Remove JAR Index

Eirik Bjorsnos duke at openjdk.org
Tue Mar 28 17:57:44 UTC 2023


On Thu, 23 Mar 2023 15:10:39 GMT, Jaikiran Pai <jpai at openjdk.org> wrote:

> I don't think we should be exporting that package. Instead, the `JarIndex` class can be updated to do `AccessController.doPrivileged(...)`.

Nice, I'll try that!

 Do you know if the `jar` tool allows running with a `SecurityManager`? If not, we could perhaps simply use `System.getProperty`?

@jaikiran made the good observation that the `JarIndex` class has various cruft left which is not needed for the `jar -i` implementation.

Since we at the moment do not know when `jar -i` will be removed (if ever), we would risk leaving a lot of unused code around if we chose to postpone this cleanup.

Becuse of this, I suggest we extend the scope of this PR to clean up `IndexJar` for use by `jdk.jartool` only.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/13158#issuecomment-1481407490
PR Comment: https://git.openjdk.org/jdk/pull/13158#issuecomment-1481783142



More information about the security-dev mailing list