Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8019558 | 7u45 | Scott Hommel | P4 | Closed | Fixed | b01 |
JDK-8010513 | 7u40 | Scott Hommel | P4 | Closed | Fixed | b20 |
In Appendix A of the JAAS reference guide:
http://docs.oracle.com/javase/7/docs/technotes/guides/security/jaas/JAASRefGuide.html#AppendixA
there is a section labeled Sample Master Security Properties file which shows a modified copy of the java.security file. There are a couple of problems with this section:
1. The java.security file is out-of-date and currently includes many new properties.
2. Keeping this in-sync with the java.security file would need to be periodically done
3. Modifications to the java.security file can be overwriten by JRE updates
I recommend removing this section because of the above issues. However, we should mention (probably at the beginning of Appendix A) that any modifications to the java.security file may be overwritten by subsequent JRE updates, and to avoid this, the user should consider specifying an alternate java.security file as described in the suggested fix for CR 7133344.
Finally, there are a couple of references to "Sun Microsystems" in this guide that should be changed to "Oracle".
http://docs.oracle.com/javase/7/docs/technotes/guides/security/jaas/JAASRefGuide.html#AppendixA
there is a section labeled Sample Master Security Properties file which shows a modified copy of the java.security file. There are a couple of problems with this section:
1. The java.security file is out-of-date and currently includes many new properties.
2. Keeping this in-sync with the java.security file would need to be periodically done
3. Modifications to the java.security file can be overwriten by JRE updates
I recommend removing this section because of the above issues. However, we should mention (probably at the beginning of Appendix A) that any modifications to the java.security file may be overwritten by subsequent JRE updates, and to avoid this, the user should consider specifying an alternate java.security file as described in the suggested fix for CR 7133344.
Finally, there are a couple of references to "Sun Microsystems" in this guide that should be changed to "Oracle".
- backported by
-
JDK-8010513 Remove Sample Master Security Properties file section of JAAS Reference Guide
-
- Closed
-
-
JDK-8019558 Remove Sample Master Security Properties file section of JAAS Reference Guide
-
- Closed
-
- relates to
-
JDK-7133344 Document the java.security.properties system property feature in the java.security file
-
- Closed
-