Exploring an alternative AccessController implementation

2017-12-11 Thread David Lloyd
This past weekend I took some time to try out an idea I've been kicking around for a couple of weeks: a pure-Java (no native) AccessController implementation [1]. •Rationale• I have a number of reasons for attempting this enhancement. • I think it would be beneficial (security-wise) if access c

[8u-dev] Request to Review and for Approval to Backport : 8193156: Need to backout fixes for JDK-8058547, JDK-8055753, JDK-8085903

2017-12-11 Thread Ivan Gerasimov
Hello! I'm seeking an approval to backport this combined backing-out of the mentioned fixes. The anti-delta is different from what we had in JDK 10, thus a request to review. BUGURL: https://bugs.openjdk.java.net/browse/JDK-8193156 WEBREV: http://cr.openjdk.java.net/~igerasim/8193156/01/web

Re: Permissions in default.policy and --patch-module

2017-12-11 Thread Alan Bateman
On 11/12/2017 07:50, Weijun Wang wrote: I was just trying to run a jtreg test on a new Windows VirtualBox VM. A small code change is needed but I don't want to do a full build (it also does not have enough memory). I just copied an existing image, and the modified class was compiled on the hos

Re: RFR 8165996: PKCS11 using NSS throws an error regarding secmod.db when NSS uses sqlite

2017-12-11 Thread Weijun Wang
Hi Martin Your src change looks fine, and if you think my test update is good, I can push the changeset. Still, I need one confirmation. The modutil man page has "modutil supports two types of databases: the legacy security databases (cert8.db, key3.db, and secmod.db) and new SQLite databases

Re: RFR 8189131: Open-source the Oracle JDK Root Certificates

2017-12-11 Thread Weijun Wang
> On Dec 8, 2017, at 10:45 PM, Volker Simonis wrote: > > OK, I've opened the RFR "JDK-8193255: Root Certificates should be > stored in text format and assembled at build time" for this issue. In fact, I would recommend we directly release cacerts as a text file containing PEM certificates, fo

Re: Permissions in default.policy and --patch-module

2017-12-11 Thread Weijun Wang
I was just trying to run a jtreg test on a new Windows VirtualBox VM. A small code change is needed but I don't want to do a full build (it also does not have enough memory). I just copied an existing image, and the modified class was compiled on the host macOS machine. So this is not "really a