Hi all, When enabling the Java Security Manager for WSO2 products, we used to have a system property named "restricted.packages".
This property accepts comma separated list of packages and sets the " package.access" *System* property [1]. In Carbon 4.2.0, this property is not used anywhere. After discussing with Prabath, I found out that the above system property was used in Carbon 3 [2]. Could anyone please let us know, why the usage of "restricted.packages" was removed [3] in latest Carbon? Also in Carbon 3.2.0 code, the "restricted.packages" system property value is directly replacing the "package.access" security property. I think that's wrong as "package.access" system property already has predefined set of packages. Shall we fix this properly in Carbon 4.3.0? Thanks! Best Regards, [1] http://docs.oracle.com/javase/7/docs/api/java/lang/SecurityManager.html#checkPackageAccess%28java.lang.String%29 [2] https://svn.wso2.org/repos/wso2/branches/carbon/3.2.0/core/org.wso2.carbon.server/3.2.2/src/main/java/org/wso2/carbon/server/Main.java [3] https://svn.wso2.org/repos/wso2/carbon/kernel/branches/4.2.0/core/org.wso2.carbon.server/4.2.0/src/main/java/org/wso2/carbon/server/Main.java -- Isuru Perera Senior Software Engineer | WSO2, Inc. | http://wso2.com/ Lean . Enterprise . Middleware about.me/chrishantha
_______________________________________________ Dev mailing list [email protected] http://wso2.org/cgi-bin/mailman/listinfo/dev
