RFR: 8344397: Remove Security Manager dependencies from java.security and sun.security packages [v4]
Sean Mullan
mullan at openjdk.org
Mon Dec 2 16:42:38 UTC 2024
On Mon, 2 Dec 2024 16:35:55 GMT, Sean Mullan <mullan at openjdk.org> wrote:
>> Now that JEP 486 has been integrated, `java.security` and `sun.security` implementation dependencies on `System.getSecurityManager` and `AccessController.doPrivileged` can be removed.
>>
>> This should cover most of the remaining cleanup in the security libraries area. A couple of the `sun.security.action` classes can't be removed yet, as well as a few constants in `sun.security.util.SecurityConstants` and internal `ProtectionDomain` methods until dependencies are removed in other areas. Some additional test cleanup can also be done later.
>
> Sean Mullan has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 10 commits:
>
> - Replace remaining calls to SecurityProperties.privilegedGetOverridable()
> with SecurityProperties.getOverridableProperty() and remove
> privilegedGetOverridable().
> - Merge
> - Remove doPrivileged calls.
> - Remove dependency on SecurityConstants.ALL_PERMISSION from java.lang.Class.
> - Remove permission text from comments in Provider.java.
> - Merge
> - Removal of unused fields from AccessControlContext - no longer needed now that VM cleanup is done.
> - More cleanup.
> - Merge
> - Initial cleanup.
I just pushed [a change](https://github.com/openjdk/jdk/pull/22418/commits/a447dd44da5394620c62bac7e05142898d092153) to replace the remaining calls to `SecurityProperties.privilegedGetOverridable()`with `SecurityProperties.getOverridableProperty()` and remove the `privilegedGetOverridable` method. @AlekseiEfimov - this involved one change to `src/java.naming/share/classes/com/sun/naming/internal/ObjectFactoriesFilter.java`.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/22418#issuecomment-2512087157
More information about the security-dev
mailing list