stan/jdk-24
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

7120974: ManagementPermission "control" needs clarification

Browse Source 
Reviewed-by: mchung, dholmes
This commit is contained in:
Frederic Parain 2012-02-01 03:52:37 -08:00
parent d548c65214
commit ec9b7d57ac
1 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
jdk/src/share/classes/java/lang/management/ManagementPermission.java
View File

@ -1,5 +1,5 @@
/* /*
* Copyright (c) 2003, 2008, Oracle and/or its affiliates. All rights reserved. * Copyright (c) 2003, 2011, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
* *
* This code is free software; you can redistribute it and/or modify it * This code is free software; you can redistribute it and/or modify it
@ -46,12 +46,17 @@ at the permission allows, and associated risks">
* <tr> * <tr>
* <td>control</td> * <td>control</td>
* <td>Ability to control the runtime characteristics of the Java virtual * <td>Ability to control the runtime characteristics of the Java virtual
* machine, for example, setting the -verbose:gc and -verbose:class flag, * machine, for example, enabling and disabling the verbose output for
* setting the threshold of a memory pool, and enabling and disabling * the class loading or memory system, setting the threshold of a memory
* the thread contention monitoring support. * pool, and enabling and disabling the thread contention monitoring
* support. Some actions controlled by this permission can disclose
* information about the running application, like the -verbose:class
* flag.
* </td> * </td>
* <td>This allows an attacker to control the runtime characteristics * <td>This allows an attacker to control the runtime characteristics
* of the Java virtual machine and cause the system to misbehave. * of the Java virtual machine and cause the system to misbehave. An
* attacker can also access some information related to the running
* application.
* </td> * </td>
* </tr> * </tr>
* <tr> * <tr>