Re: Security manager support

2022-10-01 Thread Romain Manni-Bucau
Hi, If it helps, commons weaver ( https://commons.apache.org/proper/commons-weaver/commons-weaver-parent/commons-weaver-modules-parent/commons-weaver-privilizer-parent/index.html) can help for the backport part (enable or not the run in build.xml). Romain Le dim. 2 oct. 2022 à 06:42, Christopher

Re: Security manager support

2022-10-01 Thread Christopher Schultz
Emmanuel, On 9/28/22 11:05, Emmanuel Bourg wrote: The security manager has been deprecated for removal in Java 17 [1], and at some point Tomcat will have to stop supporting it. Do we want to wait until it's no longer available in the JDK to remove it from Tomcat, or should we remove it earlie

Re: Security manager support

2022-09-28 Thread Han Li
> 2022年9月29日 00:16,Rémy Maucherat 写道: > > On Wed, Sep 28, 2022 at 5:41 PM Mark Thomas wrote: >> >> On 28/09/2022 16:05, Emmanuel Bourg wrote: >>> Hi all, >>> >>> The security manager has been deprecated for removal in Java 17 [1], and >>> at some point Tomcat will have to stop supporting it

Re: Security manager support

2022-09-28 Thread Rémy Maucherat
On Wed, Sep 28, 2022 at 5:41 PM Mark Thomas wrote: > > On 28/09/2022 16:05, Emmanuel Bourg wrote: > > Hi all, > > > > The security manager has been deprecated for removal in Java 17 [1], and > > at some point Tomcat will have to stop supporting it. > > > > Do we want to wait until it's no longer a

Re: Security manager support

2022-09-28 Thread Mark Thomas
On 28/09/2022 16:05, Emmanuel Bourg wrote: Hi all, The security manager has been deprecated for removal in Java 17 [1], and at some point Tomcat will have to stop supporting it. Do we want to wait until it's no longer available in the JDK to remove it from Tomcat, or should we remove it earl

RE: Security Manager

2006-01-20 Thread George Sexton
Yet more. It seems by specification (SRV.3.7.1) grant { permission java.io.FilePermission "${catalina.base}/temp/-", "read, write","delete"; permission java.util.PropertyPermission "javax.servlet.context.tempdir", "read"; }; Really should be set so. George Sexton MH Software, Inc. http://ww

RE: Security Manager

2006-01-20 Thread George Sexton
It also seems to me the policy file should have: grant codeBase "file:${catalina.base}/shared/-" { permission java.security.AllPermission; }; And permission java.util.PropertyPermission "java.io.tmpdir", "read"; George Sexton MH Software, Inc. http://www.mhsoftware.com/ Voice: 303 438

RE: Security Manager

2006-01-20 Thread George Sexton
It also seems to me the policy file should have: grant codeBase "file:${catalina.base}/shared/-" { permission java.security.AllPermission; }; George Sexton MH Software, Inc. http://www.mhsoftware.com/ Voice: 303 438 9585 > -Original Message- > From: George Sexton [mailto:[EMAI