RFR: 8351366: Remove the java.security.debug=scl option [v2]

Sean Mullan mullan at openjdk.org
Wed Mar 26 18:35:17 UTC 2025


On Wed, 26 Mar 2025 04:22:50 GMT, Koushik Muthukrishnan Thirupattur <duke at openjdk.org> wrote:

>> This option dumped the permissions that the SecureClassLoader assigns to ProtectionDomains, but with the disabling of the Security Manager in JDK 24, these permissions are always empty and the debugging has no value. So this option should be removed.
>
> Koushik Muthukrishnan Thirupattur has updated the pull request incrementally with one additional commit since the last revision:
> 
>   8351366:Remove the java.security.debug=scl option

src/java.base/share/classes/java/security/SecureClassLoader.java line 188:

> 186:      */
> 187:     private static class DebugHolder {
> 188:         private static final Debug debug = Debug.getInstance("scl");

You should also remove the `import sun.security.util.Debug;` line above.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/24208#discussion_r2014791214


More information about the security-dev mailing list