db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Bryan Pendleton (JIRA)" <derby-...@db.apache.org>
Subject [jira] Commented: (DERBY-622) sysinfo incorrectly requires permission on Derby jar files
Date Thu, 30 Mar 2006 17:16:31 GMT
    [ http://issues.apache.org/jira/browse/DERBY-622?page=comments#action_12372476 ] 

Bryan Pendleton commented on DERBY-622:

Hi Andrew. Whichever way we decide to go on the policy file, let's please make the changes
to *all three* of derby.jar, derbynet.jar, and derbytools.jar. This is relevant to DERBY-1152,
and has to do with the fact that the sysinfo code is included in all three jars, not just
derby.jar and derbynet.jar.

> sysinfo incorrectly requires permission on Derby jar files
> ----------------------------------------------------------
>          Key: DERBY-622
>          URL: http://issues.apache.org/jira/browse/DERBY-622
>      Project: Derby
>         Type: Bug
>   Components: Security, Tools
>     Versions:
>     Reporter: Daniel John Debrunner
>     Priority: Minor
>      Fix For:
>  Attachments: DERBY-622_step1.diff
> Running the test derbynet/sysinfo.java requires this permission in derby_tests.policy,
in order to read the jar files.
> permission java.io.FilePermission "${csinfo.codedir}${/}*", "read"
> But according to the Java security specs:
> 'Note: code can always read a file from the same directory it's in (or a subdirectory
of that directory); it does not need explicit permission to do so.'
> Probably means a privileged block is required when accessing the contents of the jar
files in sysinfo

This message is automatically generated by JIRA.
If you think it was sent incorrectly contact one of the administrators:
For more information on JIRA, see:

View raw message