Bug 49650 - Streamline package.access property definition in catalina.properties
Streamline package.access property definition in catalina.properties
Status: RESOLVED FIXED
Product: Tomcat 7
Classification: Unclassified
Component: Catalina
trunk
All All
: P2 enhancement (vote)
: ---
Assigned To: Tomcat Developers Mailing List
:
Depends on:
Blocks:
  Show dependency tree
 
Reported: 2010-07-26 12:58 UTC by Owen Farrell
Modified: 2010-11-24 15:35 UTC (History)
0 users



Attachments
catalina.properties Modifications (1.42 KB, application/octet-stream)
2010-07-26 12:58 UTC, Owen Farrell
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Owen Farrell 2010-07-26 12:58:32 UTC
Created attachment 25804 [details]
catalina.properties Modifications

The package.access property defined in catalina.properties stipulates a restrictions on both 'sun.' packages and 'sun.beans.' packages.

However, the latter restriction is implied based on the broader 'sun.' package restriction.

Additionally, the failsafe field defined in org.apache.catalina.security.SecurityConfig does not include sun.beans in the default list of package access restrictions. I would think that the default property file should match the failsafe SecurityConfig field.
Comment 1 Mark Thomas 2010-11-24 15:35:12 UTC
Thanks for the patch. It has been applied to 7.0.x and will be included in 7.0.6 onwards.