RFR: 8302819: Remove JAR Index
Eirik Bjorsnos
duke at openjdk.org
Tue Mar 28 17:57:44 UTC 2023
On Thu, 23 Mar 2023 15:10:39 GMT, Jaikiran Pai <jpai at openjdk.org> wrote:
> I don't think we should be exporting that package. Instead, the `JarIndex` class can be updated to do `AccessController.doPrivileged(...)`.
Nice, I'll try that!
Do you know if the `jar` tool allows running with a `SecurityManager`? If not, we could perhaps simply use `System.getProperty`?
@jaikiran made the good observation that the `JarIndex` class has various cruft left which is not needed for the `jar -i` implementation.
Since we at the moment do not know when `jar -i` will be removed (if ever), we would risk leaving a lot of unused code around if we chose to postpone this cleanup.
Becuse of this, I suggest we extend the scope of this PR to clean up `IndexJar` for use by `jdk.jartool` only.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/13158#issuecomment-1481407490
PR Comment: https://git.openjdk.org/jdk/pull/13158#issuecomment-1481783142
More information about the security-dev
mailing list