[jboss-jira] [JBoss JIRA] Closed: (JBMICROCONT-103) Direct system properties access org.jboss.config.plugins.property.PropertyConfiguration
[ http://jira.jboss.com/jira/browse/JBMICROCONT-103?page=all ]
Adrian Brock closed JBMICROCONT-103.
------------------------------------
Resolution: Rejected
That is not correct.
The java security system will also use the caller of
the constructor's permissions
when considering whether the System.getProperties()
works.
The access to system properties is not in a privileged block.
Direct system properties access
org.jboss.config.plugins.property.PropertyConfiguration
---------------------------------------------------------------------------------------
Key: JBMICROCONT-103
URL: http://jira.jboss.com/jira/browse/JBMICROCONT-103
Project: JBoss MicroContainer
Issue Type: Bug
Components: Configurator
Reporter: Rashid Kamran
Priority: Minor
PropertyConfiguration's constructor is not considering the check access before
accessing system properties, this means at a bootstrap level by passing a null as
parameter is equivalent to access the System.getProperties() without SecurityManager's
involvement.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira