Mercurial Mercurial > jdk-sandbox / changeset
summary | shortlog | changelog | graph | tags | bookmarks | branches | files | changeset | raw | help
Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
8155513: Deprivilege jdk.charsets
authormchung
Thu, 05 May 2016 22:39:36 -0700
changeset 37797 b84e375f071d
parent 37796 256c45c4af5d
child 37798 e1de34b6475c
8155513: Deprivilege jdk.charsets Reviewed-by: alanb, chegar
jdk/src/java.base/share/conf/security/java.policy file | annotate | diff | comparison | revisions
jdk/test/java/nio/charset/spi/basic.sh file | annotate | diff | comparison | revisions
jdk/test/java/nio/charset/spi/default-pol file | annotate | diff | comparison | revisions 
--- a/jdk/src/java.base/share/conf/security/java.policy	Fri May 06 11:38:44 2016 +0800
+++ b/jdk/src/java.base/share/conf/security/java.policy	Thu May 05 22:39:36 2016 -0700
@@ -12,6 +12,15 @@
         permission java.security.AllPermission;
 };
 
+grant codeBase "jrt:/jdk.charsets" {
+        permission java.io.FilePermission "${java.home}/-", "read";
+        permission java.util.PropertyPermission "os.name", "read";
+        permission java.util.PropertyPermission "sun.nio.cs.map", "read";
+        permission java.lang.RuntimePermission "charsetProvider";
+        permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.misc";
+        permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.cs";
+};
+
 grant codeBase "jrt:/jdk.crypto.ucrypto" {
         permission java.lang.RuntimePermission "accessClassInPackage.sun.security.*";
         permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.ch";
--- a/jdk/test/java/nio/charset/spi/basic.sh	Fri May 06 11:38:44 2016 +0800
+++ b/jdk/test/java/nio/charset/spi/basic.sh	Thu May 05 22:39:36 2016 -0700
@@ -113,7 +113,7 @@
 		     av="$av -Djava.security.manager -Djava.security.policy==$TESTSRC/default-pol";;
       cp-policy)     css="$CSS FOO";
 		     av="$av -Djava.security.manager
-		         -Djava.security.policy==$TESTSRC/charsetProvider.sp";;
+		         -Djava.security.policy=$TESTSRC/charsetProvider.sp";;
     esac
     if (set -x; $JAVA ${TESTVMOPTS} $av Test $css) 2>&1; then
       continue;
--- a/jdk/test/java/nio/charset/spi/default-pol	Fri May 06 11:38:44 2016 +0800
+++ b/jdk/test/java/nio/charset/spi/default-pol	Thu May 05 22:39:36 2016 -0700
@@ -1,3 +1,11 @@
+grant codeBase "jrt:/jdk.charsets" {
+        permission java.io.FilePermission "${java.home}/-", "read";
+        permission java.util.PropertyPermission "os.name", "read";
+        permission java.util.PropertyPermission "sun.nio.cs.map", "read";
+        permission java.lang.RuntimePermission "charsetProvider";
+        permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal.misc";
+        permission java.lang.RuntimePermission "accessClassInPackage.sun.nio.cs";
+};
 
 // default permissions granted to all domains
jdk-sandbox