Archie Cobbs writes:
> How about just having this class use getClass().getClassLoader() to
> check for itself, and refusing to function if not the boot loader?
> Then we skip all the security stuff.

You mean similar to the some of the security checks themselves, the code
being called checks the caller's classloader ?

That seems like another option - though the current initialization process
seems to be quite strong on avoiding any kind of security check during the
initialization process. I don't know if that is for functional or purely
performance reasons.

But I'll leave it to Jeroen to clarify exactly what protection is needed.

David Holmes



_______________________________________________
Classpath mailing list
[EMAIL PROTECTED]
http://lists.gnu.org/mailman/listinfo/classpath

Reply via email to