Bug 49650 - Streamline package.access property definition in catalina.properties
Summary: Streamline package.access property definition in catalina.properties
Status: RESOLVED FIXED
Alias: None
Product: Tomcat 7
Classification: Unclassified
Component: Catalina (show other bugs)
Version: trunk
Hardware: All All
: P2 enhancement (vote)
Target Milestone: ---
Assignee: Tomcat Developers Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-07-26 12:58 UTC by Owen Farrell
Modified: 2010-11-24 15:35 UTC (History)
0 users


Attachments
catalina.properties Modifications (1.42 KB, application/octet-stream)
2010-07-26 12:58 UTC, Owen Farrell 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Owen Farrell 2010-07-26 12:58:32 UTC 
Created attachment 25804 [details]
catalina.properties Modifications

The package.access property defined in catalina.properties stipulates a restrictions on both 'sun.' packages and 'sun.beans.' packages.

However, the latter restriction is implied based on the broader 'sun.' package restriction.

Additionally, the failsafe field defined in org.apache.catalina.security.SecurityConfig does not include sun.beans in the default list of package access restrictions. I would think that the default property file should match the failsafe SecurityConfig field.
Comment 1 Mark Thomas 2010-11-24 15:35:12 UTC 
Thanks for the patch. It has been applied to 7.0.x and will be included in 7.0.6 onwards.