RFR: 8344397: Remove Security Manager dependencies from java.security and sun.security packages [v2]

[Alan Bateman]

On Wed, 27 Nov 2024 19:59:24 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Now that JEP 486 has been integrated, `java.security` and `sun.security` implementation dependencies on `System.getSecurityManager` and `AccessController.doPrivileged` can be removed. 
>> 
>> This should cover most of the remaining cleanup in the security libraries area. A couple of the `sun.security.action` classes can't be removed yet, as well as a few constants in `sun.security.util.SecurityConstants` and internal `ProtectionDomain` methods until dependencies are removed in other areas. Some additional test cleanup can also be done later.
>
> Sean Mullan has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Removal of unused fields from AccessControlContext - no longer needed now that VM cleanup is done.

src/java.base/share/classes/sun/security/util/SecurityConstants.java line 61:

> 59:     // Permission constants used in the various checkPermission() calls in JDK.
> 60: 
> 61:     // java.lang.Class, java.net.URLConnection, java.security.AllPermission

BTW: It's okay to change the usage in Class.Holder.<clinit> to use `new AllPermission()`. That will help get to the point where this file can be removed.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/22418#discussion_r1862519815