Yes, this needs to be fixed in the proper way. On Tue, Sep 23, 2014 at 1:59 PM, Isuru Perera <[email protected]> wrote:
> Hi all, > > When enabling the Java Security Manager for WSO2 products, we used to have > a system property named "restricted.packages". > > This property accepts comma separated list of packages and sets the " > package.access" *System* property [1]. > > In Carbon 4.2.0, this property is not used anywhere. After discussing with > Prabath, I found out that the above system property was used in Carbon 3 > [2]. > > Could anyone please let us know, why the usage of "restricted.packages" > was removed [3] in latest Carbon? > > Also in Carbon 3.2.0 code, the "restricted.packages" system property value > is directly replacing the "package.access" security property. I think > that's wrong as "package.access" system property already has predefined set > of packages. > > Shall we fix this properly in Carbon 4.3.0? > > Thanks! > > Best Regards, > > [1] > http://docs.oracle.com/javase/7/docs/api/java/lang/SecurityManager.html#checkPackageAccess%28java.lang.String%29 > [2] > https://svn.wso2.org/repos/wso2/branches/carbon/3.2.0/core/org.wso2.carbon.server/3.2.2/src/main/java/org/wso2/carbon/server/Main.java > [3] > https://svn.wso2.org/repos/wso2/carbon/kernel/branches/4.2.0/core/org.wso2.carbon.server/4.2.0/src/main/java/org/wso2/carbon/server/Main.java > > -- > Isuru Perera > Senior Software Engineer | WSO2, Inc. | http://wso2.com/ > Lean . Enterprise . Middleware > > about.me/chrishantha > -- *Afkham Azeez* Director of Architecture; WSO2, Inc.; http://wso2.com Member; Apache Software Foundation; http://www.apache.org/ * <http://www.apache.org/>* *email: **[email protected]* <[email protected]> * cell: +94 77 3320919blog: **http://blog.afkham.org* <http://blog.afkham.org> *twitter: **http://twitter.com/afkham_azeez* <http://twitter.com/afkham_azeez> *linked-in: **http://lk.linkedin.com/in/afkhamazeez <http://lk.linkedin.com/in/afkhamazeez>* *Lean . Enterprise . Middleware*
_______________________________________________ Dev mailing list [email protected] http://wso2.org/cgi-bin/mailman/listinfo/dev
