make/java.security.override

Tue, 12 Mar 2013 18:12:42 +0530

author
sundar
date
Tue, 12 Mar 2013 18:12:42 +0530
changeset 136
c54e218333be
parent 133
5759f600fcf7
permissions
-rw-r--r--

8009757: Package access clean up and refactoring
Reviewed-by: jlaskey, lagergren, attila

sundar@82 1 # We would like to avoid references from anywhere outside nashorn
sundar@82 2 # to codegen, IR and parser packages, in particular script generated classes.
sundar@82 3 # We ensure that by overriding "package.access" security property.
sundar@82 4
sundar@82 5 # The following "package.access" value was copied from default java.security
sundar@136 6 # of jre/lib/security and appended with nashorn sensitive packages.
sundar@82 7
sundar@82 8 #
sundar@82 9 # List of comma-separated packages that start with or equal this string
sundar@82 10 # will cause a security exception to be thrown when
sundar@82 11 # passed to checkPackageAccess unless the
sundar@82 12 # corresponding RuntimePermission ("accessClassInPackage."+package) has
sundar@82 13 # been granted.
sundar@136 14 package.access=sun.,com.sun.xml.internal.ws.,com.sun.xml.internal.bind.,com.sun.imageio.,com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.,com.sun.org.glassfish.external.,com.sun.org.glassfish.gmbal.,jdk.internal.,jdk.nashorn.internal.,jdk.nashorn.tools.

mercurial