7067728: Remove stopThread RuntimePermission from the default java.policy
authorchegar
Thu, 14 Jan 2016 19:07:33 +0000
changeset 34961 13e8054a06d9
parent 34960 75262319b048
child 34962 55680f011e48
7067728: Remove stopThread RuntimePermission from the default java.policy Reviewed-by: alanb, mchung, mullan
jdk/src/java.base/share/conf/security/java.policy
--- a/jdk/src/java.base/share/conf/security/java.policy	Thu Jan 14 18:22:32 2016 +0300
+++ b/jdk/src/java.base/share/conf/security/java.policy	Thu Jan 14 19:07:33 2016 +0000
@@ -98,17 +98,6 @@
 // default permissions granted to all domains
 
 grant {
-        // Allows any thread to stop itself using the java.lang.Thread.stop()
-        // method that takes no argument.
-        // Note that this permission is granted by default only to remain
-        // backwards compatible.
-        // It is strongly recommended that you either remove this permission
-        // from this policy file or further restrict it to code sources
-        // that you specify, because Thread.stop() is potentially unsafe.
-        // See the API specification of java.lang.Thread.stop() for more
-        // information.
-        permission java.lang.RuntimePermission "stopThread";
-
         // allows anyone to listen on dynamic ports
         permission java.net.SocketPermission "localhost:0", "listen";