On Wed, 27 Nov 2024 19:59:24 GMT, Sean Mullan <mul...@openjdk.org> wrote:

>> Now that JEP 486 has been integrated, `java.security` and `sun.security` 
>> implementation dependencies on `System.getSecurityManager` and 
>> `AccessController.doPrivileged` can be removed. 
>> 
>> This should cover most of the remaining cleanup in the security libraries 
>> area. A couple of the `sun.security.action` classes can't be removed yet, as 
>> well as a few constants in `sun.security.util.SecurityConstants` and 
>> internal `ProtectionDomain` methods until dependencies are removed in other 
>> areas. Some additional test cleanup can also be done later.
>
> Sean Mullan has updated the pull request incrementally with one additional 
> commit since the last revision:
> 
>   Removal of unused fields from AccessControlContext - no longer needed now 
> that VM cleanup is done.

`OCSP.java` and `URICertStore` in `sun/security/provider/certpath` still using 
`GetPropertyAction`.

src/java.base/share/classes/java/security/Provider.java line 1:

> 1: /*

1293: // use super() to avoid permission check and other processing

No need to mention permission check.

-------------

PR Review: https://git.openjdk.org/jdk/pull/22418#pullrequestreview-2472934436
PR Review Comment: https://git.openjdk.org/jdk/pull/22418#discussion_r1865997430

Reply via email to