8159526: Deprivilege jdk.httpserver
authorvtewari
Tue, 26 Sep 2017 15:08:56 +0530
changeset 47267 b3a91921bafc
parent 47266 b841be61b9d9
child 47268 48ec75306997
8159526: Deprivilege jdk.httpserver Reviewed-by: chegar, alanb, michaelm, mchung
make/common/Modules.gmk
src/java.base/share/lib/security/default.policy
--- a/make/common/Modules.gmk	Tue Sep 26 10:20:35 2017 +0100
+++ b/make/common/Modules.gmk	Tue Sep 26 15:08:56 2017 +0530
@@ -58,7 +58,6 @@
     java.rmi \
     java.security.sasl \
     java.xml \
-    jdk.httpserver \
     jdk.internal.vm.ci \
     jdk.management \
     jdk.management.agent \
@@ -112,6 +111,7 @@
     jdk.crypto.cryptoki \
     jdk.crypto.ec \
     jdk.dynalink \
+    jdk.httpserver \
     jdk.incubator.httpclient \
     jdk.jsobject \
     jdk.localedata \
--- a/src/java.base/share/lib/security/default.policy	Tue Sep 26 10:20:35 2017 +0100
+++ b/src/java.base/share/lib/security/default.policy	Tue Sep 26 15:08:56 2017 +0530
@@ -142,6 +142,10 @@
     permission java.security.AllPermission;
 };
 
+grant codeBase "jrt:/jdk.httpserver" {
+    permission java.security.AllPermission;
+};
+
 grant codeBase "jrt:/jdk.internal.le" {
     permission java.security.AllPermission;
 };