On Fri, 1 Sep 2023 13:27:58 GMT, Alan Bateman <al...@openjdk.org> wrote:
> > Hi Alan , Your assumption 'I assume the use of System.getProperty is > > problematic when running with a SM.' is most likely correct. > > You'll need to test with a SM that denies reading the system property to be > sure. There are classes in many tool APIs (you've listed some) where this > doesn't arise. > For java.management/share/classes/sun/management/VMManagementImpl.java I tried with a security manager and had to grant property access so that it worked properly. For java.desktop/share/classes/sun/awt/FontConfiguration.java this can be called from all code working with fonts so it needs to be handled too (e.g. PrivilegedAction). Should I file a JBS issue for those two ? Some of the others listed might indeed fall into the tool APIs you mentioned. ------------- PR Comment: https://git.openjdk.org/jdk/pull/15308#issuecomment-1705142502
