Summary: | SecurityConfig,set "package.definition" security property to "nullsun.,java.,..." | ||
---|---|---|---|
Product: | Tomcat 5 | Reporter: | zhh <zhh200910> |
Component: | Catalina | Assignee: | Tomcat Developers Mailing List <dev> |
Status: | RESOLVED FIXED | ||
Severity: | normal | ||
Priority: | P2 | ||
Version: | 5.5.33 | ||
Target Milestone: | --- | ||
Hardware: | PC | ||
OS: | Windows XP | ||
Attachments: |
eclipse debug
eclipse debug 2 |
Created attachment 27252 [details]
eclipse debug 2
Fixed in Tomcat 7 - will be in 7.0.18. Proposed for 6.0 and 5.5. Fixed in 6.0.x and included in 6.0.33 onwards. This has been fixed in 5.5.x and will be included in 5.5.34 onwards. |
Created attachment 27251 [details] eclipse debug In method "org.apache.catalina.security.SecurityConfig.setSecurityProperty", when i enable the SecurityManager, if 'properties' var equals "package.definition", Security.getProperty(properties) will return null, so Security.setProperty(properties, definition + packageList); will be Security.setProperty("package.definition", null + packageList); BTW: "package.access" security property no problem。 my jdk: java version "1.6.0_20" Java(TM) SE Runtime Environment (build 1.6.0_20-b02) Java HotSpot(TM) Client VM (build 16.3-b01, mixed mode, sharing)