Re: SystemProperties secure?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Andrew Haley wrote:
> Jeroen Frijters writes:
> > Tom Tromey wrote:
> > > As I recall things in gnu.classpath should not be available
> > > to application code.  The system class loader, or something,
> > > has to enforce this.
> > 
> > That's correct. The (default) system class loader calls
> > SecurityManager.checkPackageAccess() in loadClass(String,boolean).
> > 
> > > I'm having some trouble with the details but I know Jeroen
> > > knows the details here...
> > 
> > I don't remember the details of the rest of the story, but
> > earlier in this thread Casey posted a (very small) patch that
> > enables this infrastructure and protects the gnu.classpath.
> > package.
> 
> I'm sure we don't do the right thing in gcj.  This test case
> (apprended) should do:
> 
> Checking class [Lxxx.ttt;
> checkPackageAccess sun.reflect.misc
> checkPackageAccess sun.reflect.misc
> checkPackageAccess xxx
> 
> but on gcj does:
> 
> Checking class [Lxxx.ttt;
> checkPackageAccess xxx

IIRC several of the relevant classes for this depend on VMStackWalker
and as such are somewhat out of date in gcj.

Cheers,
Gary


[Index of Archives]     [Linux Kernel]     [Linux Cryptography]     [Fedora]     [Fedora Directory]     [Red Hat Development]

  Powered by Linux