[jboss-jira] [JBoss JIRA] (AS7-6557) Verify operation within a security manager
David Lloyd (JIRA)
jira-events at lists.jboss.org
Thu Feb 21 01:02:57 EST 2013
[ https://issues.jboss.org/browse/AS7-6557?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12755600#comment-12755600 ]
David Lloyd commented on AS7-6557:
----------------------------------
Just a few notes on that idea so when I wake up tomorrow it isn't all forgotten:
* We'll need to implement {{java.security.Policy}} with a simple policy that includes the jboss-modules.jar code source
* We have options:
** Just let all remaining permissions be installed via modules
** Or, use the policy mechanism to merge in some global config
* Notes:
** Look into keying off of something besides code source - maybe modules should maintain/cache protection domains in addition to/instead of permission sets?
> Verify operation within a security manager
> -------------------------------------------
>
> Key: AS7-6557
> URL: https://issues.jboss.org/browse/AS7-6557
> Project: Application Server 7
> Issue Type: Sub-task
> Components: Security
> Reporter: David Lloyd
> Assignee: Anil Saldhana
> Fix For: 8.0.0.Alpha1
>
>
> As per the Java EE 7 spec, all Java EE products must be capable of running within a Java security manager. Test each Java EE configuration including application client for security manager operability.
> Discuss with [~dmlloyd] options around modules integration.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the jboss-jira
mailing list