On 1/3/2012 3:18 AM, Simon IJskes - QCG wrote:
On 31-12-11 14:33, Peter wrote:
Any thoughts or experience replacing java classes using the
-Xbootclasspath option?
This means creating a new java.net.SocketPermission, completely
replacing it and SocketPermissionCollection in the jvm libraries.
My gut feeling tells me, do not go there. Is this because of the lookup
problem? We can assume river is only used on LAN's and when we use it on
the internet, do we still need the socketpermission as a safety measure?
In addition to any technical issues, we would need permission from
Oracle. The -Xbootclasspath documentation points out that "Applications
that use this option for the purpose of overriding a class in rt.jar
should not be deployed as doing so would contravene the Java 2 Runtime
Environment binary code license.".
My own gut feeling is that we would be very unlikely to get that
permission, especially when the override might weaken security.
Patricia
