diff src/share/lib/security/java.security-macosx @ 12028:75f31e0bd829

8156804: Better constraint checking Summary: Apply serialization filtering to RMI Registry and DGC Reviewed-by: dfuchs, ahgross
author rriggs
date Fri, 07 Oct 2016 15:43:53 -0400
parents 09c05d3bf23e
children ae14b213f964
line wrap: on
line diff
--- a/src/share/lib/security/java.security-macosx	Tue Oct 04 14:52:57 2016 -0400
+++ b/src/share/lib/security/java.security-macosx	Fri Oct 07 15:43:53 2016 -0400
@@ -740,3 +740,28 @@
 # Otherwise, the status is UNDECIDED.
 #
 #jdk.serialFilter=pattern;pattern
+
+#
+# RMI Registry Serial Filter
+#
+# The filter pattern uses the same format as jdk.serialFilter.
+# This filter can override the builtin filter if additional types need to be
+# allowed or rejected from the RMI Registry.
+#
+#sun.rmi.registry.registryFilter=pattern;pattern
+
+#
+# RMI Distributed Garbage Collector (DGC) Serial Filter
+#
+# The filter pattern uses the same format as jdk.serialFilter.
+# This filter can override the builtin filter if additional types need to be
+# allowed or rejected from the RMI DGC.
+#
+# The builtin DGC filter can approximately be represented as the filter pattern:
+#
+#sun.rmi.transport.dgcFilter=\
+#    java.rmi.server.ObjID;\
+#    java.rmi.server.UID;\
+#    java.rmi.dgc.VMID;\
+#    java.rmi.dgc.Lease;\
+#    maxdepth=5;maxarray=10000