<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Maybe we need some criteria, that defines what's not easily
instrumented?</p>
<div class="moz-cite-prefix">On 4/08/2021 10:19 am, Peter Firmstone
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:6699b16f-e2be-f12a-646a-d060d4bd3588@zeus.net.au">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p>Excellent, Ron, that's exactly what I'm after.</p>
<p>I need to be able to implement an authorization layer on top of
the JDK, but reach down into the JDK to use authorization to
control access.</p>
<p>Can we find out how many such checks that OpenJDK is prepared
to support, then we will pick the most important?</p>
<p>Don't worry about ClassLoader, I can instrument that (thank you
Erik), and maybe I can instrument Properties, and System.exit.
So basically things we can't easily instrument with agents, that
everybody is most likely to want.<br>
</p>
<ul>
<li>Network access</li>
<li>File System access</li>
<li>User Credentials<br>
</li>
</ul>
<p>Maybe we should have a mailing list dedicated to this where we
can discuss and potentially collaborate?</p>
<p>Regards,</p>
<p>Peter.<br>
</p>
<div class="moz-cite-prefix">On 3/08/2021 10:15 pm, Ron Pressler
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:5BE7D172-304A-4143-BD6B-B6426BEEC258@oracle.com">
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">On 3 Aug 2021, at 12:50, Peter Firmstone <a class="moz-txt-link-rfc2396E" href="mailto:peter.firmstone@zeus.net.au" moz-do-not-send="true"><peter.firmstone@zeus.net.au></a> wrote:
Can you think of any workable alternative compromises?
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">If you mean a compromise between no access checks in the JDK and all access checks in the JDK, then yes,
which is possibly some callbacks for a small subset of operations that perform access checks today,
say, System.exit and opening a file or socket. I am not saying this is what should be done, but that the
effort involved is such that I can conceivably see those whose responsibility this would be agreeing to
consider it, as the value in such a mechanism might end up being worthy of that amount of effort. But I’m
guessing that the more such hooks are requested, the less likely it is that the cost remains acceptable.
— Ron</pre>
</blockquote>
</blockquote>
<pre class="moz-signature" cols="72">--
Regards,
Peter Firmstone
0498 286 363
Zeus Project Services Pty Ltd.</pre>
</body>
</html>