You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by re...@apache.org on 2016/04/07 21:08:00 UTC
svn commit: r1738173 - in /tomcat/tc8.0.x/trunk: conf/catalina.policy
java/org/apache/catalina/security/SecurityClassLoad.java
webapps/docs/changelog.xml
Author: remm
Date: Thu Apr 7 19:08:00 2016
New Revision: 1738173
URL: http://svn.apache.org/viewvc?rev=1738173&view=rev
Log:
59247: Preload ResourceEntry.
Modified:
tomcat/tc8.0.x/trunk/conf/catalina.policy
tomcat/tc8.0.x/trunk/java/org/apache/catalina/security/SecurityClassLoad.java
tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml
Modified: tomcat/tc8.0.x/trunk/conf/catalina.policy
URL: http://svn.apache.org/viewvc/tomcat/tc8.0.x/trunk/conf/catalina.policy?rev=1738173&r1=1738172&r2=1738173&view=diff
==============================================================================
--- tomcat/tc8.0.x/trunk/conf/catalina.policy (original)
+++ tomcat/tc8.0.x/trunk/conf/catalina.policy Thu Apr 7 19:08:00 2016
@@ -77,7 +77,6 @@ grant codeBase "file:${catalina.home}/bi
permission java.lang.RuntimePermission "shutdownHooks";
permission java.lang.RuntimePermission "getClassLoader";
permission java.lang.RuntimePermission "setContextClassLoader";
- permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.loader";
permission java.lang.management.ManagementPermission "monitor";
Modified: tomcat/tc8.0.x/trunk/java/org/apache/catalina/security/SecurityClassLoad.java
URL: http://svn.apache.org/viewvc/tomcat/tc8.0.x/trunk/java/org/apache/catalina/security/SecurityClassLoad.java?rev=1738173&r1=1738172&r2=1738173&view=diff
==============================================================================
--- tomcat/tc8.0.x/trunk/java/org/apache/catalina/security/SecurityClassLoad.java (original)
+++ tomcat/tc8.0.x/trunk/java/org/apache/catalina/security/SecurityClassLoad.java Thu Apr 7 19:08:00 2016
@@ -109,6 +109,9 @@ public final class SecurityClassLoad {
final String basePackage = "org.apache.catalina.loader.";
loader.loadClass
(basePackage +
+ "ResourceEntry");
+ loader.loadClass
+ (basePackage +
"WebappClassLoaderBase$PrivilegedFindResourceByName");
}
Modified: tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml
URL: http://svn.apache.org/viewvc/tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml?rev=1738173&r1=1738172&r2=1738173&view=diff
==============================================================================
--- tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/tc8.0.x/trunk/webapps/docs/changelog.xml Thu Apr 7 19:08:00 2016
@@ -98,6 +98,10 @@
functions as designed and sessions are swapped out to keep the active
session count below <code>maxActiveSessions</code>. (markt)
</fix>
+ <fix>
+ <bug>59247</bug>: Preload ResourceEntry as a workaround for security
+ manager issues on some JVMs. (kkolinko/remm)
+ </fix>
</changelog>
</subsection>
<subsection name="Coyote">
@@ -152,11 +156,6 @@
<bug>59211</bug>: Add hamcrest to Eclipse classpath. Patch is provided
by Huxing Zhang. (violetagg)
</fix>
- <fix>
- <bug>59247</bug>: Add loader package access permission to JULI.
- Based on a patch submitted by Coty Sutherland.
- (remm)
- </fix>
<update>
<bug>59280</bug>: Update the NSIS Installer used to build the
Windows Installers to version 2.51. (kkolinko)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org