Hi,

Updated with recommendations.

Webrev:
http://cr.openjdk.java.net/~rriggs/webrev-hijrah-config-8049376/
Issue:
https://bugs.openjdk.java.net/browse/JDK-8048124

Thanks, Roger

On 10/20/2014 11:25 AM, Alan Bateman wrote:
On 20/10/2014 16:11, roger riggs wrote:
What permission would be needed to read the resource?
The limited doPrivileged should include the minimum permission.
The resources will be be resources.jar so I think read access to that should be sufficient. If you run a small test with -Djava.security.manager that triggers the config file to load then it would help verify that. When we move to the modular image then the resources will be elsewhere in the runtime image so if you really want to use limited doPrivileged here then access to ${java.home}/** should do it. Of course not using limited doPrivileged is a possibility too.

-Alan


Reply via email to