Hi all,

I created a JIRA [1] for this.

Thanks!

[1] https://wso2.org/jira/browse/CARBON-14967

On Tue, Sep 23, 2014 at 1:59 PM, Isuru Perera <[email protected]> wrote:

> Hi all,
>
> When enabling the Java Security Manager for WSO2 products, we used to have
> a system property named "restricted.packages".
>
> This property accepts comma separated list of packages and sets the  "
> package.access" *System* property [1].
>
> In Carbon 4.2.0, this property is not used anywhere. After discussing with
> Prabath, I found out that the above system property was used in Carbon 3
> [2].
>
> Could anyone please let us know, why the usage of "restricted.packages"
> was removed [3] in latest Carbon?
>
> Also in Carbon 3.2.0 code, the "restricted.packages" system property value
> is directly replacing the "package.access" security property. I think
> that's wrong as "package.access" system property already has predefined set
> of packages.
>
> Shall we fix this properly in Carbon 4.3.0?
>
> Thanks!
>
> Best Regards,
>
> [1]
> http://docs.oracle.com/javase/7/docs/api/java/lang/SecurityManager.html#checkPackageAccess%28java.lang.String%29
> [2]
> https://svn.wso2.org/repos/wso2/branches/carbon/3.2.0/core/org.wso2.carbon.server/3.2.2/src/main/java/org/wso2/carbon/server/Main.java
> [3]
> https://svn.wso2.org/repos/wso2/carbon/kernel/branches/4.2.0/core/org.wso2.carbon.server/4.2.0/src/main/java/org/wso2/carbon/server/Main.java
>
> --
> Isuru Perera
> Senior Software Engineer | WSO2, Inc. | http://wso2.com/
> Lean . Enterprise . Middleware
>
> about.me/chrishantha
>



-- 
Isuru Perera
Senior Software Engineer | WSO2, Inc. | http://wso2.com/
Lean . Enterprise . Middleware

about.me/chrishantha
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to