stan/jdk-24
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

7067728: Remove stopThread RuntimePermission from the default java.policy

Browse Source 
Reviewed-by: alanb, mchung, mullan
This commit is contained in:
Chris Hegarty 2016-01-14 19:07:33 +00:00
parent cd81999286
commit f01220d47b
1 changed files with 0 additions and 11 deletions

11
jdk/src/java.base/share/conf/security/java.policy

@ -98,17 +98,6 @@ grant codeBase "jrt:/java.activation" {
// default permissions granted to all domains
grant {
// Allows any thread to stop itself using the java.lang.Thread.stop()
// method that takes no argument.
// Note that this permission is granted by default only to remain
// backwards compatible.
// It is strongly recommended that you either remove this permission
// from this policy file or further restrict it to code sources
// that you specify, because Thread.stop() is potentially unsafe.
// See the API specification of java.lang.Thread.stop() for more
// information.
permission java.lang.RuntimePermission "stopThread";
// allows anyone to listen on dynamic ports
permission java.net.SocketPermission "localhost:0", "listen";