Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8283093 JMX connections should default to using an ObjectInputFilter
  3. JDK-8295938

Release Note: JMX Connections Use an ObjectInputFilter by Default

    XMLWordPrintable

Details

    • Sub-task
    • Resolution: Delivered
    • P4
    • 20
    • 20
    • core-svc

    Description

      The default JMX agent now sets an ObjectInputFilter on the RMI connection to restrict the types that the server will deserialize. This should not affect normal usage of the MBeans in the JDK. Applications which register their own MBeans in the Platform MBeanServer may need to extend the filter to support any additional types that their MBeans accept as parameters. The default filter already covers any type that OpenMBeans and MXBeans might use.

      The filter pattern is set in `JDK/conf/management/management.properties` using the property `com.sun.management.jmxremote.serial.filter.pattern`. If there are additional Java types that need to be passed, the default can be overridden by running with `-Dcom.sun.management.jmxremote.serial.filter.pattern=`.

      Serialization Filtering and the filter pattern format are described in detail in the Core Libraries guide.

      Attachments

        Activity

          People

            kevinw Kevin Walls
            kevinw Kevin Walls
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: