forked from ibmruntimes/openj9-openjdk-jdk17
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit c49042f
committed
Allow extension of RestrictedSecurity profiles
RestrictedSecurity profiles sometimes share a lot of duplicate settings
with only minor differences. With these changes the extension, similar
to object-orientation, of profiles becomes possible.
More specifically, a profile A can extend another a profile B, using
RestrictedSecurity.<profile A name>.extends =
RestrictedSecurity.<profile B name>. This allows profile A to inherit
all of profile B's properties. One can add additional properties to
profile A, or amend some of the existing ones. That includes overriding,
appending or removing from a property (wherever that's applicable).
An additional property is introduced. The RestrictedSecurity.<profile
name>.desc.hash = <hash algorithm>:<hash> is used to ensure the profile
hasn't been unintentionally altered. The profile's properties are hashed
using the selected <hash algorithm>, and the result is compared to the
<hash> provided through the property. This property is mandatory for
base profiles (i.e., profiles that are not extending anything), and
optional for the rest.
Signed-off-by: Kostas Tsiounis <[email protected]>1 parent 8dadc9e commit c49042fCopy full SHA for c49042f
File tree
Expand file treeCollapse file tree
3 files changed
+964
-436
lines changedFilter options
- closed/src/java.base/share/classes/openj9/internal/security
- src/java.base/share
- classes/sun/security/jca
- conf/security
Expand file treeCollapse file tree
3 files changed
+964
-436
lines changed
0 commit comments