changeset 47279:b3a91921bafc

8159526: Deprivilege jdk.httpserver Reviewed-by: chegar, alanb, michaelm, mchung
author vtewari
date Tue, 26 Sep 2017 15:08:56 +0530
parents b841be61b9d9
children 48ec75306997
files make/common/Modules.gmk src/java.base/share/lib/security/default.policy
diffstat 2 files changed, 5 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/make/common/Modules.gmk	Tue Sep 26 10:20:35 2017 +0100
+++ b/make/common/Modules.gmk	Tue Sep 26 15:08:56 2017 +0530
@@ -58,7 +58,6 @@
     java.rmi \
     java.security.sasl \
     java.xml \
-    jdk.httpserver \
     jdk.internal.vm.ci \
     jdk.management \
     jdk.management.agent \
@@ -112,6 +111,7 @@
     jdk.crypto.cryptoki \
     jdk.crypto.ec \
     jdk.dynalink \
+    jdk.httpserver \
     jdk.incubator.httpclient \
     jdk.jsobject \
     jdk.localedata \
--- a/src/java.base/share/lib/security/default.policy	Tue Sep 26 10:20:35 2017 +0100
+++ b/src/java.base/share/lib/security/default.policy	Tue Sep 26 15:08:56 2017 +0530
@@ -142,6 +142,10 @@
     permission java.security.AllPermission;
 };
 
+grant codeBase "jrt:/jdk.httpserver" {
+    permission java.security.AllPermission;
+};
+
 grant codeBase "jrt:/jdk.internal.le" {
     permission java.security.AllPermission;
 };