You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2021/06/08 08:40:58 UTC

[tomcat] branch 8.5.x updated: Fix 65332 - javac permissions with Java 9 onwards for JSPs

This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 8.5.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/8.5.x by this push:
     new a3bd927  Fix 65332 - javac permissions with Java 9 onwards for JSPs
a3bd927 is described below

commit a3bd927ff223bf06925771e1f9d5986af0427f45
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Tue Jun 8 09:39:16 2021 +0100

    Fix 65332 - javac permissions with Java 9 onwards for JSPs
    
    https://bz.apache.org/bugzilla/show_bug.cgi?id=65332
---
 conf/catalina.policy       | 7 ++++++-
 webapps/docs/changelog.xml | 7 +++++++
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/conf/catalina.policy b/conf/catalina.policy
index 0567324..5cfab09 100644
--- a/conf/catalina.policy
+++ b/conf/catalina.policy
@@ -50,9 +50,14 @@ grant codeBase "file:${java.home}/lib/ext/-" {
         permission java.security.AllPermission;
 };
 
+// This permission is required when using javac to compile JSPs on Java 9
+// onwards
+//grant codeBase "jrt:/jdk.compiler" {
+//        permission java.security.AllPermission;
+//};
 
-// ========== CATALINA CODE PERMISSIONS =======================================
 
+// ========== CATALINA CODE PERMISSIONS =======================================
 
 // These permissions apply to the daemon code
 grant codeBase "file:${catalina.home}/bin/commons-daemon.jar" {
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 38b27ca..d37bcaf 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -218,6 +218,13 @@
         parameters, the method that requires the fewest varargs is preferred.
         (markt)
       </fix>
+      <add>
+        <bug>65332</bug>: Add a commented out section in
+        <code>catalina.policy</code> that provides the necessary permissions to
+        compile JSPs with javac when running on Java 9 onwards with a security
+        manager. It is commented out as it will cause errors if used with
+        earlier Java versions. (markt)
+      </add>
     </changelog>
   </subsection>
   <subsection name="WebSocket">

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org