JDK-Info:
--------
java version "1.5.0-beta3"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0-beta3-b57)
Java HotSpot(TM) Client VM (build 1.5.0-beta3-b57, mixed mode, sharing)
 
System-Info:
------------
1) SunOS ramkumar 5.9 Generic_112233-12 sun4u sparc SUNW,Sun-Blade-100
2) SunOS jlab401 5.8 Generic_117000-05 sun4u sparc SUNW,Ultra-5_10

Steps to Reproduce:
-------------------

I had setup DTF at sqindia.india.sun.com and used the Web server: jakarta-tomcat-4.1.27 and executed automatic test run for Javawebstart testcases with the following details:

Lookup server at: ramkumar.india.sun.com
Controller at: ramkumar.india.sun.com
Stable JDK: /net/sqindia/export/disk08/jdk/1.4.2/fcs/b28/binaries/solsparc
Web server at: http://sqindia.india.sun.com:8080/jawstest
Component: Javawebstart
Testlist: Fulllook (testlist.javaws.fulllook)
Job file: Attached

I had logged into Sparc Solaris 8 and 9 machines with my unix id (rk145013) and had let the automatic DTF tests run on them. I had locked the screen; but still could see the Java web start splash screen (JaWS loading splash screen) on the screen on top of the lock dialog box.

Feel this provides a hole in Solaris security.


###@###.### 2004-07-15
###@###.### 2004-07-15