[DERBY-6649] Meaningless permissions granted to sysinfo.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.11.1.1
• Fix Version/s: 10.11.1.1
• Component/s: Documentation, Tools
• Urgency: Normal
• Bug behavior facts: Security
• Assignee: Camilla Haase
• Reporter: Richard N. Hillegas
• Created: 07/Jul/14 13:06
• Updated: 09/Sep/16 09:54
• Resolved: 10/Jul/14 14:09

Description

The server.policy and template.policy files grant the following meaningless permissions in every block related to sysinfo:

permission java.io.FilePermission "java.runtime.version", "read";
permission java.io.FilePermission "java.fullversion", "read";