[
https://issues.apache.org/jira/browse/DERBY-7138?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17522974#comment-17522974
]
Richard N. Hillegas commented on DERBY-7138:
--------------------------------------------
Attaching derby-7138-07-aa-removePrivilegeBlocksFromTests.diff. This patch
removes privilege blocks from the tests. This includes all references to
java.security.AccessController, java.security.PrivilegedAction, and
java.security.PrivilegedActionException. With this patch, tests pass cleanly
with the classpath and with the modulepath.
Touches the following files:
{noformat}
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/compatibility/VersionCombinationConfigurator.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/demo/CheckToursDBTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/derbynet/ClientSideSystemPropertiesTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/derbynet/NetworkServerControlApiTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/derbynet/ProtocolTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/derbynet/ServerPropertiesTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/engine/ErrorStreamTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/engine/RestrictiveFilePermissionsTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/jdbc4/AbortTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/jdbc4/ConnectionMethodsTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/jdbcapi/DataSourceSerializationTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/jdbcapi/ResultSetStreamTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/lang/ConstraintCharacteristicsTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/lang/DatabaseClassLoadingTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/lang/XplainStatisticsTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/lang/wisconsin.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/management/JMXTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/management/MBeanTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/management/PlatformConnectionGetter.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/store/AutomaticIndexStatisticsTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/store/ClassLoaderBootTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/store/MaxLogNumberRecovery.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/store/OSReadOnlyTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/tests/upgradeTests/UpgradeClassLoader.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/util/CanonTestCase.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/util/DeadlockWatchdog.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/util/FTFileUtil.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/util/IjTestCase.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/util/PrivilegedFileOpsForTests.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/util/PropertyUtil.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/util/T_ConsistencyChecker.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/util/TestRoutines.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/functionTests/util/TestUtil.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/BaseJDBCTestCase.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/BaseTestCase.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/ClassLoaderTestSetup.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/ClasspathSetup.java
M java/org.apache.derby.tests/org/apache/derbyTesting/junit/EnvTest.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/JDBCDataSource.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/LocaleTestSetup.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/NetworkServerTestSetup.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/SpawnedProcess.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/SupportFilesSetup.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/SystemPropertyTestSetup.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/TestConfiguration.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/junit/TimeZoneTestSetup.java
M java/org.apache.derby.tests/org/apache/derbyTesting/junit/XML.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/system/oe/run/Schema.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/crypto/T_Cipher.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/harness/BasicUnitTestManager.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/harness/T_Bomb.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/harness/UnitTestMain.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/services/T_CacheService.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/services/T_DaemonService.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/services/T_LockFactory.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/services/T_UUIDFactory.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/store/T_AccessFactory.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/store/T_FileSystemData.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/store/T_Heap.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/store/T_RawStoreFactory.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/store/T_RecoverBadLog.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/store/T_RecoverFullLog.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/store/T_Recovery.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/store/T_SortController.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/store/T_StreamFile.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/store/T_XA.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/store/T_b2i.java
M
java/org.apache.derby.tests/org/apache/derbyTesting/unitTests/util/MsgTrace.java
{noformat}
> Remove references to the Java Security Manager
> ----------------------------------------------
>
> Key: DERBY-7138
> URL: https://issues.apache.org/jira/browse/DERBY-7138
> Project: Derby
> Issue Type: Task
> Components: Build tools, Documentation
> Affects Versions: 10.16.0.0
> Reporter: Richard N. Hillegas
> Assignee: Richard N. Hillegas
> Priority: Major
> Attachments: DerbyServerTest.java, Z.java,
> derby-7138-01-aa-removeSecurityManagerFromOldHarnessTests.diff,
> derby-7138-02-ab-moveMethodsToTestConfiguration.diff,
> derby-7138-03-aa-removePermissionsTests.diff,
> derby-7138-04-ab-hostChangeInNetworkServerControlApiTest.diff,
> derby-7138-05-aa-removeSecurityManager.diff,
> derby-7138-06-aa-removeSecurityManagerSetup.diff,
> derby-7138-07-aa-removePrivilegeBlocksFromTests.diff
>
>
> The Open JDK team has deprecated the Java Security Manager and indicated that
> it will be removed in a future release of Java. See
> https://openjdk.java.net/jeps/411. In an email thread titled "protecting
> security-sensitive operations on multi-tenant servers" on the
> security-...@openjdk.java.net mailing list, Alan Bateman indicated that
> developers should containerize their applications instead.
> This issue tracks work needed to remove Derby's references to the Java
> Security Manager.
> At a minimum, the following work needs to be done:
> o The tests should be adjusted so that they don't install a SecurityManager.
> o References to the SecurityManager should be removed from product code.
> o We should remove the SecurityManager section of the Derby Security Guide.
> In its place, we should recommend that developers containerize their Derby
> applications.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
