RFR: 8168078: Remove permission to read all system properties granted to the jdk.crypto.ec module

Sean Mullan sean.mullan at oracle.com
Mon Oct 17 21:18:36 UTC 2016


I had to make a small update to the webrev to PKCS11Test.java because 
the TestEC test failed on Windows. Some deployment-specific security 
providers will throw a ServiceConfigurationError if not granted the 
right permissions. These permissions may not be configured correctly and 
are outside the scope of the jdk.crypto.ec module, so the exception is 
ignored. (This is the same way we load providers in 
sun.security.jca.ProviderConfig)

new webrev: http://cr.openjdk.java.net/~mullan/webrevs/8168078/webrev.01/

Thanks,
Sean

On 10/17/2016 11:10 AM, Xuelei Fan wrote:
> Looks fine to me.
>
> Xuelei
>
> On 10/17/2016 10:51 PM, Sean Mullan wrote:
>> Please review this fix to remove granting the unnecessary
>> PropertyPermission to the jdk.crypto.ec module:
>>
>> http://cr.openjdk.java.net/~mullan/webrevs/8168078/webrev.00/
>>
>> The existing TestEC test has been modified to also run under a
>> SecurityManager to verify that removing the permission does not break
>> anything.
>>
>> --Sean


More information about the security-dev mailing list