Uploaded image for project: 'Derby'
  1. Derby
  2. DERBY-7014

ij requires excessive PropertyPermissions

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 10.15.1.3
    • Fix Version/s: None
    • Component/s: Tools
    • Labels:
      None
    • Urgency:
      Normal
    • Bug behavior facts:
      Security

      Description

      The following broad permission...

      permission java.util.PropertyPermission "*", "read,write";
      

      ...must be granted to derbytools.jar because of the following stanza from initFromEnvironment() in ij.jj:

      		// load all protocols specified via properties
      		//
              Properties p = AccessController.doPrivileged(new PrivilegedAction<Properties>() {
                	public Properties run() {
                    	return System.getProperties();
                  }
              });
      

      We should not have to grant derbytools.jar the power to read and overwrite all system properties.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                rhillegas Richard N. Hillegas
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated: