changeset 48130:998c88ae423a

8189116: Give the jdk.internal.vm.compiler.management only the permissions it really needs to expose the bean Reviewed-by: mchung, kvn
author jtulach
date Fri, 10 Nov 2017 10:30:42 +0100
parents c134a8bee21a
children 235a18d659fc
files src/java.base/share/lib/security/default.policy
diffstat 1 files changed, 4 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/src/java.base/share/lib/security/default.policy	Mon Nov 27 17:26:47 2017 +0000
+++ b/src/java.base/share/lib/security/default.policy	Fri Nov 10 10:30:42 2017 +0100
@@ -155,7 +155,10 @@
 };
 
 grant codeBase "jrt:/jdk.internal.vm.compiler.management" {
-    permission java.security.AllPermission;
+    permission java.lang.RuntimePermission "accessClassInPackage.org.graalvm.compiler.hotspot";
+    permission java.lang.RuntimePermission "accessClassInPackage.jdk.vm.ci.runtime";
+    permission java.lang.RuntimePermission "accessClassInPackage.sun.management.spi";
+    permission java.lang.RuntimePermission "sun.management.spi.PlatformMBeanProvider.subclass";
 };
 
 grant codeBase "jrt:/jdk.jsobject" {