RFR: 8344177: Remove SecurityManager and related calls from java.management [v2]

Kevin Walls kevinw at openjdk.org
Mon Nov 18 16:47:51 UTC 2024


On Mon, 18 Nov 2024 16:11:57 GMT, Daniel Fuchs <dfuchs at openjdk.org> wrote:

>> Kevin Walls has updated the pull request incrementally with two additional commits since the last revision:
>> 
>>  - remove missed suppression
>>  - comment correction
>
> src/java.management/share/classes/com/sun/jmx/remote/security/MBeanServerAccessController.java line 76:
> 
>> 74:  *
>> 75:  * <p>An MBean could possibly be a ClassLoader.  Users who do not want an
>> 76:  * MBean which could be a ClassLoader should not permit MBean creation.</p>
> 
> Maybe we should just refuse to create an MBean which is a ClassLoader for now (see further comments below) and handle that part in a dedicated PR.

Yes agreed I'm going to update again with checkClassLoader put back.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/22100#discussion_r1846925982


More information about the serviceability-dev mailing list