Re: RFR 8043406: Change default policy for JCE providers to run with as few privileges,as possible

2014-07-08 Thread Sean Mullan
On 7/8/14, 5:33 PM, Valerie Peng wrote: I modified the ProviderConfig class to skip providers when the corresponding provider class failed during initiation time (e.g. lacking certain permission). Thus, for tests which do not need/use crypto providers, their test policy don't have to contain the

Re: RFR 8043406: Change default policy for JCE providers to run with as few privileges,as possible

2014-07-08 Thread Valerie Peng
I modified the ProviderConfig class to skip providers when the corresponding provider class failed during initiation time (e.g. lacking certain permission). Thus, for tests which do not need/use crypto providers, their test policy don't have to contain the entries for crypto providers. Than

Re: RFR 8043406: Change default policy for JCE providers to run with as few privileges,as possible

2014-07-08 Thread Sean Mullan
Looks good, although do you know why you were able to remove the grant AllPermission from so many of the test policy files without granting additional specific permissions? --Sean On 07/07/2014 05:14 PM, Valerie Peng wrote: Updated the webrev to include the updates of test policy files. Also

Re: RFR 8043406: Change default policy for JCE providers to run with as few privileges,as possible

2014-07-08 Thread Valerie Peng
When looking through the code and running regression tests as well as some of my own sample programs, SunPKCS11 needs permission to access "sun.security.pkcs11.allowSingleThreadedModules" property. As for other providers, they seem fine without the PropertyPermission. But the required permis

Re: RFR 8043406: Change default policy for JCE providers to run with as few privileges, as possible

2014-07-07 Thread Wang Weijun
Hi Valerie I didn't read your previous webrevs, but why is "permission java.util.PropertyPermission "*", "read";" needed by every provider? I go to sun/ec, sun/pkcs11, com/sun/crypto and find no special System.getProperty() calls there. Thanks Max On Jul 8, 2014, at 5:14, Valerie Peng wrote

Re: RFR 8043406: Change default policy for JCE providers to run with as few privileges,as possible

2014-07-07 Thread Valerie Peng
Updated the webrev to include the updates of test policy files. Also changed the ProviderConfig class to ignore provider instantiation failures, so that we don't need to include the entries for crypto providers in the test policy files when the tests themselves do not use/depend on functionali

Re: RFR 8043406: Change default policy for JCE providers to run with as few privileges,as possible

2014-06-26 Thread Valerie Peng
Updated the webrev in place (still at webrev.01), now that Mandy has putback'ed her fix for the ClassLoader.loadLibrary issue. Thanks, Valerie On 6/20/2014 3:30 PM, Valerie Peng wrote: Webrev is updated at: http://cr.openjdk.java.net/~valeriep/8043406/webrev.01 Sure, I will file a bug aft

Re: RFR 8043406: Change default policy for JCE providers to run with as few privileges,as possible

2014-06-23 Thread Mandy Chung
Valerie, On 6/20/14 4:57 PM, Mandy Chung wrote: Yes please file a bug and it does look like a bug in the loadLibrary. I'll look into it. It'd be helpful if you can include a stack trace in the JBS issue without granting FilePermission to access all files. I have a patch and going to send

Re: RFR 8043406: Change default policy for JCE providers to run with as few privileges,as possible

2014-06-20 Thread Mandy Chung
On 6/20/2014 3:30 PM, Valerie Peng wrote: Webrev is updated at: http://cr.openjdk.java.net/~valeriep/8043406/webrev.01 Thanks Valerie. Good to see the security providers granting only the permissions it requires. Looks okay to me. Sure, I will file a bug after Mandy's confirmation.

Re: RFR 8043406: Change default policy for JCE providers to run with as few privileges,as possible

2014-06-20 Thread Valerie Peng
Webrev is updated at: http://cr.openjdk.java.net/~valeriep/8043406/webrev.01 Sure, I will file a bug after Mandy's confirmation. Thanks, Valerie On 6/20/2014 8:46 AM, Sean Mullan wrote: 36 // Needed by Runtime.loadLibrary(String) call 37 permission java.io.FilePermission "<>

Re: RFR 8043406: Change default policy for JCE providers to run with as few privileges,as possible

2014-06-20 Thread Sean Mullan
36 // Needed by Runtime.loadLibrary(String) call 37 permission java.io.FilePermission "<>", "read"; It seems like this is due to a bug in Runtime.loadLibrary, since you have already granted the provider the permission to load the library. I think possibly the call to ClassLo

RFR 8043406: Change default policy for JCE providers to run with as few privileges,as possible

2014-06-18 Thread Valerie Peng
Sean, Not sure if you can get to reviewing this before your vacation. If not, I will find someone else to help... Webrev: http://cr.openjdk.java.net/~valeriep/8043406/webrev.00/ Thanks, Valerie