standard extensions path is hard-coded in default system policy file

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: P4
    • 1.4.0
    • Affects Version/s: 1.2.0, 1.3.0
    • Component/s: security-libs
    • None
    • beta2
    • generic
    • generic

      The default system policy file (in jre/lib/security/java.policy)
      grants all permissions to standard extensions, as follows:

      grant codeBase "file:${java.home}/lib/ext/*" {
              permission java.security.AllPermission;
      };

      This uses a hardcoded path to the extensions directory, which users could change
      by setting the "java.ext.dirs" system property.

      Therefore, the above "grant" statement should be changed to:

      grant codeBase "file:${java.ext.dirs}/*" {
              permission java.security.AllPermission;
      };

            Assignee:
            Charlie Lai (Inactive)
            Reporter:
            Jan Luehe (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: