Bug 49650 - Streamline package.access property definition in catalina.properties
Summary: Streamline package.access property definition in catalina.properties
Alias: None
Product: Tomcat 7
Classification: Unclassified
Component: Catalina (show other bugs)
Version: trunk
Hardware: All All
: P2 enhancement (vote)
Target Milestone: ---
Assignee: Tomcat Developers Mailing List
Depends on:
Reported: 2010-07-26 12:58 UTC by Owen Farrell
Modified: 2010-11-24 15:35 UTC (History)
0 users

catalina.properties Modifications (1.42 KB, application/octet-stream)
2010-07-26 12:58 UTC, Owen Farrell

Note You need to log in before you can comment on or make changes to this bug.
Description Owen Farrell 2010-07-26 12:58:32 UTC
Created attachment 25804 [details]
catalina.properties Modifications

The package.access property defined in catalina.properties stipulates a restrictions on both 'sun.' packages and 'sun.beans.' packages.

However, the latter restriction is implied based on the broader 'sun.' package restriction.

Additionally, the failsafe field defined in org.apache.catalina.security.SecurityConfig does not include sun.beans in the default list of package access restrictions. I would think that the default property file should match the failsafe SecurityConfig field.
Comment 1 Mark Thomas 2010-11-24 15:35:12 UTC
Thanks for the patch. It has been applied to 7.0.x and will be included in 7.0.6 onwards.