[HADOOP-11049] javax package system class default is too broad

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 2.6.0
• Component/s: util
• Hadoop Flags: Reviewed
• Assignee: Sangjin Lee
• Reporter: Sangjin Lee
• Created: 02/Sep/14 20:32
• Updated: 01/Dec/14 03:10
• Resolved: 29/Sep/14 14:41

Description

The system class default defined in ApplicationClassLoader has "javax.". This is too broad. The intent of the system classes is to exempt classes that are provided by the JDK along with hadoop and minimally necessary dependencies that are guaranteed to be on the system classpath. "javax." is too broad for that.

For example, JSR-330 which is part of JavaEE (not JavaSE) has "javax.inject". Packages like them should not be declared as system classes, as they will result in ClassNotFoundException if they are needed and present on the user classpath.

Issue Links

• is related to: HADOOP-10893 isolated classloader on the client side