From 02ba926da2b5c192d2e43cbdbf6bd65eb7f0702d Mon Sep 17 00:00:00 2001 From: Vyom Tewari Date: Tue, 26 Sep 2017 15:08:56 +0530 Subject: [PATCH] 8159526: Deprivilege jdk.httpserver Reviewed-by: chegar, alanb, michaelm, mchung --- make/common/Modules.gmk | 2 +- src/java.base/share/lib/security/default.policy | 4 ++++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/make/common/Modules.gmk b/make/common/Modules.gmk index ee697971a2d..f863310e952 100644 --- a/make/common/Modules.gmk +++ b/make/common/Modules.gmk @@ -58,7 +58,6 @@ BOOT_MODULES += \ java.rmi \ java.security.sasl \ java.xml \ - jdk.httpserver \ jdk.internal.vm.ci \ jdk.management \ jdk.management.agent \ @@ -112,6 +111,7 @@ PLATFORM_MODULES += \ jdk.crypto.cryptoki \ jdk.crypto.ec \ jdk.dynalink \ + jdk.httpserver \ jdk.incubator.httpclient \ jdk.jsobject \ jdk.localedata \ diff --git a/src/java.base/share/lib/security/default.policy b/src/java.base/share/lib/security/default.policy index 94c2f153a9e..a68dfa1cdeb 100644 --- a/src/java.base/share/lib/security/default.policy +++ b/src/java.base/share/lib/security/default.policy @@ -142,6 +142,10 @@ grant codeBase "jrt:/jdk.dynalink" { permission java.security.AllPermission; }; +grant codeBase "jrt:/jdk.httpserver" { + permission java.security.AllPermission; +}; + grant codeBase "jrt:/jdk.internal.le" { permission java.security.AllPermission; };