Hello Jeremy,

Jeremy Volkman wrote:

I assume you're referring to SecurityManager.getClassContext()?


Yes.

The only problem I foresee is if a SecurityManager is installed that
disallows creation of new SecurityManagers (there is a check for this
in the SecurityManager constructor).  If you do indeed use
SecurityManager.getClassContext(), I assume you had to extend the
SecurityManager class as well since the method is protected.


Yes, I created a subclass. The framework pretty much operates under the assumption that its protection domain is "all permission", otherwise there would be plently of things that would cause security exceptions.

Once we get security implemented properly in Felix (with [conditional] permission admin), then the framework will pretty much assume it controls security. This is another area where we may want to investigate how we interact with multiple framework instances as well as host applications.

-> richard

Reply via email to