Re: Is there a solution to my problem? (Re: Symlinking jars is dangerous (Re: The evils of /usr/share/java/repository))
On Wed, Sep 19, 2001 at 10:44:30AM -0700, Bill Wohler wrote:
> Ola Lundqvist <opal@debian.org> writes:
> > > Another point about lib/ext. The JVM treats all jars in lib/ext as
> > > priveleged, like java.lang.*.
> > >
> > > "By default, installed extensions are granted all security permissions
> > > as if they were part of the core platform API"
> > >
> > > -- http://java.sun.com/docs/books/tutorial/ext/security/policy.html
> > >
> > >
> > > IOW, symlinking a bunch of jars to lib/ext is not the same as including
> > > them in the regular classpath.
> > >
> > > Now, do we really want to preclude the use of a SecurityManager in any
> > > Debian-packaged Java app?
> >
> > Probably not. So the lib/ext dir should be empty, right?
>
> Disagree. There is a world of difference between jars you install
> and jars you serendipitously obtain over the net via the Java Plug-in
> or Java Web Start.
>
> Our use of $JAVA_HOME/jre/lib/ext is exactly what it was meant for.
Well I have not used any such features. When I ment empty I ment that
no packages (debs) should place their jars there. But I might be
wrong here too. :)
Regards,
// Ola
> --
> Bill Wohler <wohler@newt.com> http://www.newt.com/wohler/ GnuPG ID:610BD9AD
> Maintainer of comp.mail.mh FAQ and mh-e. Vote Libertarian!
> If you're passed on the right, you're in the wrong lane.
>
>
> --
> To UNSUBSCRIBE, email to debian-java-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
--
--------------------- Ola Lundqvist ---------------------------
/ opal@debian.org Björnkärrsgatan 5 A.11 \
| opal@lysator.liu.se 584 36 LINKÖPING |
| +46 (0)13-17 69 83 +46 (0)70-332 1551 |
| http://www.opal.dhs.org UIN/icq: 4912500 |
\ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 /
---------------------------------------------------------------
Reply to: