RFR: 8074812 More specific error message when the .java_pid well-known file is not secure
Jaroslav Bachorik
jaroslav.bachorik at oracle.com
Thu Mar 12 08:39:24 UTC 2015
On 12.3.2015 08:18, Staffan Larsen wrote:
>
>> On 11 mar 2015, at 20:37, Martin Buchholz <martinrb at google.com
>> <mailto:martinrb at google.com>> wrote:
>>
>> Producing good error messages is such hard work!
>
> Aye. And so often forgotten.
>
>>
>> Instead of 0%3o, use 0%03o
>> Since you want to print the lowest 9 bits of the mode, don't you want & 0x1ff
> Absolutely. I opted for the octal representation 0777 instead which
> seemed fitting here.
>
> new webrev: http://cr.openjdk.java.net/~sla/8074812/webrev.02/
This looks fine.
-JB-
>
> Thanks,
> /Staffan
>
>
>>
>> On Wed, Mar 11, 2015 at 2:30 AM, Staffan Larsen
>> <staffan.larsen at oracle.com <mailto:staffan.larsen at oracle.com>> wrote:
>>
>> Thanks for the feedback. Here is a new version that prints out
>> more details for each of the errors messages. Let me know if you
>> have suggestions for better wording. It also adds an #include for
>> jvm.h that was missing from some of the files (it is needed
>> for jio_snprintf).
>>
>> webrev: http://cr.openjdk.java.net/~sla/8074812/webrev.01/
>>
>> /Staffan
>>
>>> On 10 mar 2015, at 19:07, Martin Buchholz <martinrb at google.com
>>> <mailto:martinrb at google.com>> wrote:
>>>
>>>
>>>
>>> On Tue, Mar 10, 2015 at 10:53 AM, Jaroslav Bachorik
>>> <jaroslav.bachorik at oracle.com
>>> <mailto:jaroslav.bachorik at oracle.com>> wrote:
>>>
>>>
>>> This just got me thinking - would including [sb.st_uid, uid]
>>> and [sb.st_gid, gid] in the error message be of any
>>> additional benefit?
>>>
>>>
>>> Yes. How much do you want to improve the quality of error messages?
>>>
>>> You could use the word "effective" only when effective and real
>>> users don't match.
>>> You could print out the two mismatched values.
>>
>>
>
More information about the serviceability-dev
mailing list