Michael Silk wrote:
> On 5/9/06, Dinis Cruz <[EMAIL PROTECTED]> wrote:

<snip>

> 
>> Is there a example out there where (by default) java code is executed in
>> an environment with :
>>
>>     * the security manager enabled (with a strong security policy) and
>>     * the verifier disabled
> 
> Yes. Your local JRE.

...but only in the exceptional case where a local Java application was
started with a security manager activated, but without the -verify flag
enabled.
Most local Java applications are started without the verifier enabled
and without a security manager.

For untrusted applets and webstart apps, both the verifier and a
security manager are enabled.



-- 
Stephen de Vries
Corsaire Ltd
E-mail: [EMAIL PROTECTED]
Tel:    +44 1483 226014
Fax:    +44 1483 226068
Web:    http://www.corsaire.com

_______________________________________________
Secure Coding mailing list (SC-L)
SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php

Reply via email to