> On Apr 29, 2016, at 11:25 PM, Alan Bateman <alan.bate...@oracle.com> wrote: > > On 30/04/2016 06:02, Mandy Chung wrote: >> JDK-8154190: Deprivilege java.compiler module >> Webrev: >> http://cr.openjdk.java.net/~mchung/jdk9/webrevs/8154190/webrev.00/ >> >> JDK-8155513: Deprivilege jdk.charsets module >> Webrev: >> http://cr.openjdk.java.net/~mchung/jdk9/webrevs/8155513/webrev.00/ >> >> Very simple change. >> >> These patches move java.compiler and jdk.charsets module to be defined by >> the platform class loader and grant with AllPermissions initially. We could >> grant finer-grained permissions in the future. >> > This looks okay to me. For jdk.charsets then I expect it should be easy to > identify the permission it needs as there are only a few cases where it needs > os.name or to read a resource file in the image.
I originally asked Sherman to identify the permissions for jdk.charsets as a follow up issue. I took another look and define the list: http://cr.openjdk.java.net/~mchung/jdk9/webrevs/8155513/webrev.01/ Mandy
