RFR: 8168078: Remove permission to read all system properties granted to the jdk.crypto.ec module

Xuelei Fan xuelei.fan at oracle.com
Tue Oct 18 05:39:36 UTC 2016


OK.

Xuelei

On 10/18/2016 5:18 AM, Sean Mullan wrote:
> I had to make a small update to the webrev to PKCS11Test.java because
> the TestEC test failed on Windows. Some deployment-specific security
> providers will throw a ServiceConfigurationError if not granted the
> right permissions. These permissions may not be configured correctly and
> are outside the scope of the jdk.crypto.ec module, so the exception is
> ignored. (This is the same way we load providers in
> sun.security.jca.ProviderConfig)
>
> new webrev: http://cr.openjdk.java.net/~mullan/webrevs/8168078/webrev.01/
>
> Thanks,
> Sean
>
> On 10/17/2016 11:10 AM, Xuelei Fan wrote:
>> Looks fine to me.
>>
>> Xuelei
>>
>> On 10/17/2016 10:51 PM, Sean Mullan wrote:
>>> Please review this fix to remove granting the unnecessary
>>> PropertyPermission to the jdk.crypto.ec module:
>>>
>>> http://cr.openjdk.java.net/~mullan/webrevs/8168078/webrev.00/
>>>
>>> The existing TestEC test has been modified to also run under a
>>> SecurityManager to verify that removing the permission does not break
>>> anything.
>>>
>>> --Sean


More information about the security-dev mailing list