db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rick Hillegas (JIRA)" <j...@apache.org>
Subject [jira] [Created] (DERBY-7014) ij requires excessive PropertyPermissions
Date Sun, 28 Oct 2018 14:54:00 GMT
Rick Hillegas created DERBY-7014:
------------------------------------

             Summary: ij requires excessive PropertyPermissions
                 Key: DERBY-7014
                 URL: https://issues.apache.org/jira/browse/DERBY-7014
             Project: Derby
          Issue Type: Bug
          Components: Tools
    Affects Versions: 10.15.0.0
            Reporter: Rick Hillegas


The following broad permission...

{noformat}
permission java.util.PropertyPermission "*", "read,write";
{noformat}

...must be granted to derbytools.jar because of the following stanza from initFromEnvironment()
in ij.jj:

{noformat}
		// load all protocols specified via properties
		//
        Properties p = AccessController.doPrivileged(new PrivilegedAction<Properties>()
{
          	public Properties run() {
              	return System.getProperties();
            }
        });
{noformat}

We should not have to grant derbytools.jar the power to read and overwrite all system properties.




--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message