db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rick Hillegas (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (DERBY-5363) Tighten default permissions of DB files with >= JDK6
Date Fri, 12 Aug 2011 15:25:27 GMT

    [ https://issues.apache.org/jira/browse/DERBY-5363?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13084185#comment-13084185
] 

Rick Hillegas commented on DERBY-5363:
--------------------------------------

Hi Dag,

I tried building the patch on Ubuntu using the Oracle jdk1.7.0-143 compiler. The build failed
as follows. Not sure if this is worth pursuing since you plan to rework the code to use reflection
rather than compiled links to the Java 7 features.

     [echo] Before setting properties:  compilerPropsAlreadySet = ${compilerPropsAlreadySet}
     [echo] Before setting properties:  compilerLevel16 = 1.6
     [echo] Before setting properties:  jsr169compile.classpath = /mac-home/sw/phoneME/phoneme_advanced_mr2/lib/btclasses.zip:/mac-home/sw/phoneME/phoneme_advanced_mr2/lib/basis.jar:/mac-home/sw/jsr169Support/jdbc.jar
     [echo] Before setting properties:  j14lib = ${j14lib}
     [echo] Before setting properties:  java14compile.classpath = ${java14compile.classpath}
     [echo] Before setting properties:  j15lib = ${j15lib}
     [echo] Before setting properties:  java15compile.classpath = ${java15compile.classpath}
     [echo] Before setting properties:  j16lib = ${j16lib}
     [echo] Before setting properties:  java16compile.classpath = ${java16compile.classpath}
     [echo] Before setting properties:  j17lib = ${j17lib}
     [echo] Before setting properties:  java17compile.classpath = ${java17compile.classpath}

BUILD FAILED
/mac-home/derby/mainline/trunk/build.xml:278: Don't know how to set java15compile.classpath,
java16compile.classpath using this environment:

java.vendor = Oracle Corporation
java.home = /home/rhillegas/sw/java/oracle/jdk1.7.0-143/jre
java.version = 1.7.0-ea
os.name = Linux
j14lib = null
j15lib = null
j16lib = null
jdkSearchPath = /home/rhillegas/sw/java/oracle

Please consult BUILDING.html for instructions on how to set the compiler-classpath properties.


> Tighten default permissions of DB files with >= JDK6
> ----------------------------------------------------
>
>                 Key: DERBY-5363
>                 URL: https://issues.apache.org/jira/browse/DERBY-5363
>             Project: Derby
>          Issue Type: Improvement
>            Reporter: Dag H. Wanvik
>         Attachments: permission-5.diff, permission-5.stat, permission-6.diff, permission-6.stat,
z.sql
>
>
> Before Java 6, files created by Derby would have the default
> permissions of the operating system context. Under Unix, this would
> depend on the effective umask of the process that started the Java VM.
> In Java 6 and 7, there are methods available that allows tightening up this
> (File.setReadable, setWritable), making it less likely that somebody
> would accidentally run Derby with a too lenient default.
> I suggest we take advantage of this, and let Derby by default (in Java
> 6 and higher) limit the visibility to the OS user that starts the VM,
> e.g. on Unix this would be equivalent to running with umask 0077. More
> secure by default is good, I think.
> We could have a flag, e.g. "derby.storage.useDefaultFilePermissions"
> that when set to true, would give the old behavior.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

Mime
View raw message