Re: Moving system properties to gnu.classpath.*

[Michael Koch]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am Donnerstag, 7. Oktober 2004 10:43 schrieb Jeroen Frijters:
> Michael Koch wrote:
> > Am Donnerstag, 7. Oktober 2004 10:26 schrieb Jeroen Frijters:
> > > I would like to propose to move the system properties to a
> > > public class in the gnu.classpath package. This removes the
> > > need to use GetPropertyAction to access the properties and --
> > > more importantly to me -- it also greatly simplifies class
> > > initialization dependencies (currently, every class that
> > > requires access to the system properties sucks in a huge
> > > dependency (java.lang.System, SecurityManager and who knows
> > > what else).
> > >
> > > The obvious downside is that we'd really need to get serious
> > > about preventing untrusted code access to the gnu.classpath.*
> > > package.
> > >
> > > Any thoughts, comments or objections?
> >
> > I'm all for simplifying and generalizing code but how do you want
> > to implement this in a secure way ?
>
> I'm not sure yet. I think it would require VM support to make the
> gnu.classpath package special (e.g. in that it can only be accessed
> by code loaded by the bootstrap class loader).

Is this really a good idea ?


Michael
- -- 
Homepage: http://www.worldforge.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBZQgrWSOgCCdjSDsRAtTUAJwOwmGThPRb6abwxdnyll4xHd/l/ACeJVP9
NX85kNlX8fLYJ+/URAEUyR0=
=Zl/U
-----END PGP SIGNATURE-----