Re: Review request: 8040059 Change default policy for extensions to no permission

2014-04-22 Thread Mandy Chung
On 4/22/14 2:54 PM, Bernd Eckenfels wrote: Hello, I do like to restrict the permissions granted, especially for client deployments. in a related note: why is JavaFX shipped by default as an extension? JavaFX is coinstalled with Oracle JDK and not in the OpenJDK. I will take out jfxrt.jar from

Re: Review request: 8040059 Change default policy for extensions to no permission

2014-04-22 Thread Bernd Eckenfels
Hello, I do like to restrict the permissions granted, especially for client deployments. in a related note: why is JavaFX shipped by default as an extension? Or better asked, how is the admin in the future supposed to maintain a minimum JRE? Randomly deleting extension jars? Would it be better t

Review request: 8040059 Change default policy for extensions to no permission

2014-04-22 Thread Mandy Chung
This change proposes to remove granting all permissions for extensions as the default and implements the principle of least privilege.In JDK 9, we want to reduce the privileges of as many system classes as possible. http://cr.openjdk.java.net/~mchung/jdk9/webrevs/8040059/webrev.00/ This patch

Re: [9] Review Request: 8028266 Tidy warnings cleanup for packages java.security/javax.security

2014-04-22 Thread alexander stepanov
Hello Bradford, Thanks, Could you please review again: http://cr.openjdk.java.net/~yan/JDK-8028266/webrev.01/ > Who is going to help you with that? I didn't communicate with JCE team before. So could you please appoint me someone to contact? Thanks. Regards, Alexander On 22.04.2014 1:08, B