RFR: 8344397: Remove Security Manager dependencies from java.security and sun.security packages [v4]

Sean Mullan mullan at openjdk.org
Mon Dec 2 16:35:55 UTC 2024


> Now that JEP 486 has been integrated, `java.security` and `sun.security` implementation dependencies on `System.getSecurityManager` and `AccessController.doPrivileged` can be removed. 
> 
> This should cover most of the remaining cleanup in the security libraries area. A couple of the `sun.security.action` classes can't be removed yet, as well as a few constants in `sun.security.util.SecurityConstants` and internal `ProtectionDomain` methods until dependencies are removed in other areas. Some additional test cleanup can also be done later.

Sean Mullan has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 10 commits:

 - Replace remaining calls to SecurityProperties.privilegedGetOverridable()
   with SecurityProperties.getOverridableProperty() and remove
   privilegedGetOverridable().
 - Merge
 - Remove doPrivileged calls.
 - Remove dependency on SecurityConstants.ALL_PERMISSION from java.lang.Class.
 - Remove permission text from comments in Provider.java.
 - Merge
 - Removal of unused fields from AccessControlContext - no longer needed now that VM cleanup is done.
 - More cleanup.
 - Merge
 - Initial cleanup.

-------------

Changes: https://git.openjdk.org/jdk/pull/22418/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=22418&range=03
  Stats: 1257 lines in 40 files changed: 85 ins; 955 del; 217 mod
  Patch: https://git.openjdk.org/jdk/pull/22418.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/22418/head:pull/22418

PR: https://git.openjdk.org/jdk/pull/22418


More information about the security-dev mailing list