Re: JEP 411: sandboxing use case

2022-01-18 Thread Olivier Cailloux
Thanks to Sean and Peter for your answers (sorry, I did not manage to answer your messages because of issues with my e-mail provider so I answer mine instead). As Peter observes, putting student code in a restricted VM or container (while the grading code would be more priviledged) does not seem

Re: JEP 411: sandboxing use case

2022-01-12 Thread Peter Firmstone
Hi Olivier, After JEP 421 (deprecation of finalizers) and a JEP is assigned to removal of finalizers, it will be possible to instrument java methods and intercept their calls.   While finalizers exist, instrumenting constructors would allow finalizer attacks to circumvent the permission

Re: JEP 411: sandboxing use case

2022-01-11 Thread Sean Mullan
On 1/10/22 9:22 AM, Olivier Cailloux wrote: Dear list, I would like to share my use case for currently using the security manager mechanism (SM) in my software. Now that JEP 411 is there, any advice about any currently existing solution for replacement would be welcome, if this is already

JEP 411: sandboxing use case

2022-01-10 Thread Olivier Cailloux
Dear list, I would like to share my use case for currently using the security manager mechanism (SM) in my software. Now that JEP 411 is there, any advice about any currently existing solution for replacement would be welcome, if this is already possible; alternatively, I hope that a replacement