# HG changeset patch # User fparain # Date 1328097157 28800 # Node ID 49cf84efbd2df3298dd6a4adc778e29237f62729 # Parent 14cfd18b410f8d2d3bf211d56a26242cf445c02b 7120974: ManagementPermission "control" needs clarification Reviewed-by: mchung, dholmes diff -r 14cfd18b410f -r 49cf84efbd2d jdk/src/share/classes/java/lang/management/ManagementPermission.java --- a/jdk/src/share/classes/java/lang/management/ManagementPermission.java Tue Jan 31 04:57:20 2012 -0800 +++ b/jdk/src/share/classes/java/lang/management/ManagementPermission.java Wed Feb 01 03:52:37 2012 -0800 @@ -1,5 +1,5 @@ /* - * Copyright (c) 2003, 2008, Oracle and/or its affiliates. All rights reserved. + * Copyright (c) 2003, 2011, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it @@ -46,12 +46,17 @@ * * control * Ability to control the runtime characteristics of the Java virtual - * machine, for example, setting the -verbose:gc and -verbose:class flag, - * setting the threshold of a memory pool, and enabling and disabling - * the thread contention monitoring support. + * machine, for example, enabling and disabling the verbose output for + * the class loading or memory system, setting the threshold of a memory + * pool, and enabling and disabling the thread contention monitoring + * support. Some actions controlled by this permission can disclose + * information about the running application, like the -verbose:class + * flag. * * This allows an attacker to control the runtime characteristics - * of the Java virtual machine and cause the system to misbehave. + * of the Java virtual machine and cause the system to misbehave. An + * attacker can also access some information related to the running + * application. * * *