I modified a class inside the jdk.crypto.cryptoki module, compiled it with 
"javac -d /tmp", and then ran a small program with

  java --patch-module jdk.crypto.cryptoki=/tmp -Djava.security.manager MyProg

and it fails with

TEST RESULT: Failed. Execution failed: `main' threw exception: 
java.security.AccessControlException: access denied 
("java.lang.RuntimePermission" "accessClassInPackage.sun.security.pkcs11")

Looks like the permission granted to "jrt:/jdk.crypto.cryptoki" in 
lib/security/default.policy are not granted to the new classes inside /tmp. If 
I duplicate the block for "jrt:/jdk.crypto.cryptoki" to "file:/c:/tmp" the 
program runs.

I thought the /tmp folder should be cascaded into the jrt file system for the 
module. Can this be enhanced?

Thanks
Max

Reply via email to