RFR: 8283093: JMX connections should default to using an ObjectInputFilter [v4]

Kevin Walls kevinw at openjdk.org
Wed Oct 26 10:18:28 UTC 2022


> Set the management.properties  "com.sun.management.jmxremote.serial.filter.pattern" value by default, to restrict types that can be deserialized.
> 
> Use the example value from the Core Libraries guide (see section 2. Serialization Filtering / Built-in Filters / Filters for JMX), plus Subject which is needed when using authentication.
> 
> The sun/management tests run OK with this change.  The existing test sun/management/jmxremote/startstop/JMXStartStopTest.java will fail if the filter specified is made too restrictive.

Kevin Walls has updated the pull request incrementally with one additional commit since the last revision:

  Split long line

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/10507/files
  - new: https://git.openjdk.org/jdk/pull/10507/files/e6940778..1dc7eef0

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=10507&range=03
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=10507&range=02-03

  Stats: 3 lines in 1 file changed: 2 ins; 0 del; 1 mod
  Patch: https://git.openjdk.org/jdk/pull/10507.diff
  Fetch: git fetch https://git.openjdk.org/jdk pull/10507/head:pull/10507

PR: https://git.openjdk.org/jdk/pull/10507


More information about the serviceability-dev mailing list