Re: JEP 411: Deprecate the Security Manager for Removal

2021-05-19 Thread Mark Thomas
On 19/05/2021 17:37, Robert Hicks wrote: Is that the "same" security manager we flip on for Tomcat or just an unfortunate naming coincidence? It is the same one. If you need the security manager I'd expect, based on typical lifetimes of Tomcat major versions, that you'd have a supported versi

JEP 411: Deprecate the Security Manager for Removal

2021-05-19 Thread Robert Hicks
Is that the "same" security manager we flip on for Tomcat or just an unfortunate naming coincidence? -- Bob

Re: JEP 411 Deprecate the Security Manager for removal

2021-04-15 Thread Mark Thomas
On 15/04/2021 21:03, Me Self wrote: Hi All It appears the security manager is going to be removed from a future release of java according to https://openjdk.java.net/jeps/411. That will be quite a chunk of code we could remove / would have to remove from Tomcat. When running Tomcat on Linu

JEP 411 Deprecate the Security Manager for removal

2021-04-15 Thread Me Self
Hi All It appears the security manager is going to be removed from a future release of java according to https://openjdk.java.net/jeps/411. When running Tomcat on Linux there are many excellent alternatives to locking down the JVM process with sandboxing/mandatory access control for instance Syst