[jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v2]
Chris Plummer
cjplummer at openjdk.org
Mon Jan 30 19:24:27 UTC 2023
On Wed, 18 Jan 2023 17:56:43 GMT, Kevin Walls <kevinw at openjdk.org> wrote:
>> The default setting for the ObjectInputFilter for JMX, introduced in jdk20, is too restrictive.
>> javax.management.Attribute and AttributeList classes are also needed, and Query related classes.
>>
>> There are a number of Query-related classes, so adding javax.management.* is appropriate otherwise the list becomes hard to manage. This is a * and not a ** which would mean all subpackages, so the openmean subpackage stays in the list.
>
> Kevin Walls has updated the pull request incrementally with two additional commits since the last revision:
>
> - filter properties update: more classes logged as ALLOWED during wider testing
> - Add a Notification test
src/jdk.management.agent/share/conf/management.properties line 323:
> 321: java.rmi.dgc.*;\
> 322: java.rmi.server.*;\
> 323: javax.security.auth.Subject;!*
What does the ! at the end indicate?
-------------
PR: https://git.openjdk.org/jdk20/pull/97
More information about the serviceability-dev
mailing list