Following on from JEP 486 (Permanently Disable the Security Manager), there are Permission classes which are unused. These should be deprecated, for removal in future.

In jdk.attach, the permission class share/classes/com/sun/tools/attach/AttachPermission.java is not used and should be deprecated for removal.

Other mentions:

src/jdk.compiler/share/data/symbols/jdk.attach-9.sym.txt
53:class name com/sun/tools/attach/AttachPermission

src/jdk.compiler/share/data/symbols/jdk.attach-M.sym.txt
44:class name com/sun/tools/attach/AttachPermission

src/jdk.compiler/share/data/symbols/jdk.attach-B.sym.txt
44:class name com/sun/tools/attach/AttachPermission

src/jdk.compiler/share/data/symbols/jdk.attach-G.sym.txt
41:class name com/sun/tools/attach/AttachPermission