Bug 51473

Summary: SecurityConfig,set "package.definition" security property to "nullsun.,java.,..."
Product: Tomcat 5 Reporter: zhh <zhh200910>
Component: CatalinaAssignee: Tomcat Developers Mailing List <dev>
Severity: normal    
Priority: P2    
Version: 5.5.33   
Target Milestone: ---   
Hardware: PC   
OS: Windows XP   
Attachments: eclipse debug
eclipse debug 2

Description zhh 2011-07-05 05:37:09 UTC
Created attachment 27251 [details]
eclipse debug

In method "org.apache.catalina.security.SecurityConfig.setSecurityProperty",
when i enable the SecurityManager,
if 'properties' var equals "package.definition",
Security.getProperty(properties) will return null,


Security.setProperty(properties, definition + packageList); 

will be

Security.setProperty("package.definition", null + packageList); 


"package.access" security property no problem。

my jdk:
java version "1.6.0_20"
Java(TM) SE Runtime Environment (build 1.6.0_20-b02)
Java HotSpot(TM) Client VM (build 16.3-b01, mixed mode, sharing)
Comment 1 zhh 2011-07-05 05:39:50 UTC
Created attachment 27252 [details]
eclipse debug 2
Comment 2 Konstantin Kolinko 2011-07-05 07:14:01 UTC
Fixed in Tomcat 7 - will be in 7.0.18.
Proposed for 6.0 and 5.5.
Comment 3 Mark Thomas 2011-07-21 16:18:17 UTC
Fixed in 6.0.x and included in 6.0.33 onwards.
Comment 4 Mark Thomas 2011-08-12 08:22:17 UTC
This has been fixed in 5.5.x and will be included in 5.5.34 onwards.