Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8168862

Tighten permissions granted to the jdk.zipfs module

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P2 P2
    • 9
    • 9
    • core-libs
    • b145
    • Not verified

      The jdk.zipfs module is granted permission to read all system properties in lib/security/default.policy. However, from a scan of the code, it appears to only read the "os.name" system property.

      The permissions should be tightened to only grant reading of the specific properties it needs.

            sherman Xueming Shen
            mullan Sean Mullan
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: