Re: [Patch][RFC] Introduction of gnu.classpath.SystemProperties

[Mark Wielaard <mark at klomp dot org>]

Hi,

On Fri, 2005-04-22 at 14:05 -0400, Bryce McKinlay wrote:
> It seems like there are security issues here. A call to 
> System.getProperty() normally requires a security check, but without 
> some kind of additional security layer, this will currently 
> unconditionally allow access the system properties.
> 
> The documentation does mention:
> 
> >+/**
> >+ * The class manages the System properties. This class is only available to
> >+ * privileged code (i.e. code loaded by the bootstrap class loader) and
> >+ * therefore doesn't do any security checks.
> >  
> >
> Although this does seem like a good idea (we can avoid AccessController 
> checks), AFAIK, libgcj does not yet know about  this rule that only the 
> bootstrap classloader can access gnu.classpath. Are the access rules for 
> the gnu.classpath namespace defined/documented anywhere?

This is enforced by the (default) system class loader from GNU Classpath
which does a SecurityManager.checkPackageAccess(). See the discussion
following the original patch by Jeroen:
http://lists.gnu.org/archive/html/classpath-patches/2004-12/msg00035.html

Cheers,

Mark

Attachment: signature.asc
Description: This is a digitally signed message part