JEP 486: Permanently Disable the Security Manager #20563

pshipton · 2024-11-11T19:24:16Z

github-actions · 2024-11-11T19:24:40Z

Issue Number: 20563
Status: Open
Recommended Components: comp:vm, comp:jclextensions, comp:build
Recommended Assignees: jasonfengj9, babsingh, longyuzhang

pshipton · 2024-11-11T19:27:06Z

@tajila

tajila · 2024-11-11T19:45:49Z

@theresa-m Please take a look at this

theresa-m · 2024-11-12T15:48:49Z

https://bugs.openjdk.org/browse/JDK-8338412 contains a list of JCL specification changes.

The following classes will need to be updated in j9:

java.lang.System JDK24: Permanently Disable the Security Manager #20625 Remove System.security field and getSecurityManager calls for JDK 24 #20851
java.lang.ClassLoader Remove System.getSecurityManager calls from java.base and criu #20939
~~java.security.AccessController~~ Support JEP 486: Permanently Disable the Security Manager #20586
~~java.security.AccessControllerContext~~ Support JEP 486: Permanently Disable the Security Manager #20586
~~Any cases where a SecurityException is thrown that is related to the security manager will need to be removed~~ JDK 24 remove java.security.AccessController.doPrivileged part 1 #21042
~~Updates to any tests in j9 that fail due to these changes~~

pshipton · 2024-11-13T13:46:12Z

FYI #20586

JasonFengJ9 · 2024-11-13T14:01:15Z

#20586 unblocks the JDK24 merging & abuild jobs.
There are still other issues to be addressed as per #20563 (comment)

theresa-m · 2024-12-05T20:06:23Z

This is a list of work to be done after #20625 fyi @JasonFengJ9

JasonFengJ9 · 2024-12-10T22:53:52Z

openjdknext_j9_sanity.system_aarch64_linux

15:01:36  TESTING:
15:01:36  Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:01:36  	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:01:36  	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:01:36  	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:01:36  	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:01:36  -----------------------------------
15:01:36  MachineInfo_0_FAILED

15:01:41  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:01:41  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:01:41  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:01:41  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:01:41  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:01:41  Generation failed
15:01:41  -----------------------------------
15:01:41  TestJlmLocal_0_FAILED

15:01:44  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:01:44  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:01:44  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:01:44  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:01:44  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:01:44  Generation failed
15:01:44  -----------------------------------
15:01:44  TestJlmRemoteMemoryAuth_0_FAILED

15:01:46  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:01:46  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:01:46  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:01:46  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:01:46  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:01:46  Generation failed
15:01:46  -----------------------------------
15:01:46  TestJlmRemoteMemoryNoAuth_0_FAILED

15:01:50  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:01:50  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:01:50  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:01:50  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:01:50  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:01:50  Generation failed
15:01:50  -----------------------------------
15:01:50  TestIBMJlmLocal_0_FAILED

15:01:52  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:01:52  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:01:52  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:01:52  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:01:52  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:01:52  Generation failed
15:01:52  -----------------------------------
15:01:52  TestIBMJlmRemoteClassNoAuth_0_FAILED

15:01:56  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:01:56  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:01:56  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:01:56  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:01:56  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:01:56  Generation failed
15:01:56  -----------------------------------
15:01:56  ParallelStreamsLoadTest_CS_0_FAILED

15:01:58  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:01:58  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:01:58  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:01:58  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:01:58  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:01:58  Generation failed
15:01:58  -----------------------------------
15:01:58  MathLoadTest_bigdecimal_5m_0_FAILED

15:02:01  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:01  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:01  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:01  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:01  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:01  Generation failed
15:02:01  -----------------------------------
15:02:01  MauveMultiThrdLoad_5m_0_FAILED

15:02:06  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:06  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:06  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:06  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:06  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:06  Generation failed
15:02:06  -----------------------------------
15:02:06  CpMp_MP_0_FAILED

15:02:11  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:11  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:11  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:11  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:11  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:11  Generation failed
15:02:11  -----------------------------------
15:02:11  InternalAPIs_0_FAILED

15:02:13  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:13  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:13  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:13  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:13  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:13  Generation failed
15:02:13  -----------------------------------
15:02:13  AutoMod1_0_FAILED

15:02:14  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:14  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:14  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:14  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:14  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:14  Generation failed
15:02:14  -----------------------------------
15:02:14  AutoMod_Impl1_0_FAILED

15:02:15  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:15  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:15  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:15  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:15  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:15  Generation failed
15:02:15  -----------------------------------
15:02:15  AutoMod_Impl3_0_FAILED

15:02:18  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:18  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:18  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:18  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:18  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:18  Generation failed
15:02:18  -----------------------------------
15:02:18  PatMod_AppMod_0_FAILED

15:02:19  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:19  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:19  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:19  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:19  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:19  Generation failed
15:02:19  -----------------------------------
15:02:19  PatModImg_PlatMod_0_FAILED

15:02:20  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:20  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:20  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:20  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:20  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:20  Generation failed
15:02:20  -----------------------------------
15:02:20  PatModImg_AppMod_0_FAILED

15:02:22  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:22  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:22  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:22  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:22  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:22  Generation failed
15:02:22  -----------------------------------
15:02:22  PatModImg_Unex_0_FAILED

15:02:27  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:27  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:27  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:27  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:27  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:27  Generation failed
15:02:27  -----------------------------------
15:02:27  Jlink_AddMLimitM_0_FAILED

15:02:28  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:28  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:28  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:28  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:28  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:28  Generation failed
15:02:28  -----------------------------------
15:02:28  CpMpJlink_0_FAILED

15:02:30  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:30  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:30  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:30  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:30  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:30  Generation failed
15:02:30  -----------------------------------
15:02:30  Jlink_GenOpt_0_FAILED

15:02:36  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:02:36  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:02:36  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:02:36  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:02:36  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:02:36  Generation failed
15:02:36  -----------------------------------
15:02:36  NioLoadTest_5m_1_FAILED

15:01:39  GEN stderr Exception in thread "(unnamed thread)" java/lang/Error: A command line option has attempted to allow or enable the Security Manager. Enabling a Security Manager is not supported.
15:01:39  GEN stderr 	at java/lang/System.initSecurityManager (java.base@24-internal/System.java:913)
15:01:39  GEN stderr 	at java/lang/ClassLoader.initializeClassLoaders (java.base@24-internal/ClassLoader.java:227)
15:01:39  GEN stderr 	at java/lang/Thread.initialize (java.base@24-internal/Thread.java:2722)
15:01:39  GEN stderr 	at java/lang/Thread.<init> (java.base@24-internal/Thread.java:2773)
15:01:39  Generation failed
15:01:39  -----------------------------------
15:01:39  DaaLoadTest_daa2_5m_1_FAILED

theresa-m · 2024-12-11T19:49:55Z

Thanks @JasonFengJ9 I opened adoptium/aqa-tests#5817 to remove -Djava.security.manager=allow from system tests. I will run some tests to see what fails.

theresa-m · 2024-12-12T16:54:27Z

I ran a grinder with adoptium/aqa-tests#5817 resulting in 32 failing sanity system tests https://hyc-runtimes-jenkins.swg-devops.com/view/Test_grinder/job/Grinder/45811/. Some of these are from github.com/eclipse-openj9/openj9-systemtest.git and some from github.com/adoptium/aqa-systemtest.git. I will get in touch with the adoptium team about the best approach to fixing or disabling these.

DaaLoadTest_daa1_5m
DaaLoadTest_daa2_5m
DaaLoadTest_daa3_5m
TestIBMJlmRemoteClassAuth
TestIBMJlmRemoteClassNoAuth
TestIBMJlmRemoteMemoryAuth
TestIBMJlmRemoteMemoryNoAuth
MathLoadTest_autosimd_5m
MathLoadTest_bigdecimal_5m
ClassLoadingTest_CS_5m
ClassLoadingTest_5m
CLLoad
DaaLoadTest_daa1_CS_5m
DaaLoadTest_daa2_CS_5m
DaaLoadTest_daa3_CS_5m
LambdaLoadTest_CS_5m
LambdaLoadTest_J9_5m
MathLoadTest_autosimd_CS_5m
MathLoadTest_bigdecimal_CS_5m
MauveMultiThrdLoad_5m
MauveSingleInvocLoad_J9_5m
MauveSingleThrdLoad_J9_5m
NioLoadTest_5m
ParallelStreamsLoadTest_CS
ParallelStreamsLoadTest_J9
TestJlmRemoteClassAuth
TestJlmRemoteClassNoAuth
TestJlmRemoteMemoryAuth
TestJlmRemoteMemoryNoAuth
TestJlmRemoteNotifierProxyAuth
TestJlmRemoteThreadAuth
TestJlmRemoteThreadNoAuth

JasonFengJ9 · 2024-12-12T17:24:05Z

Some of these are from github.com/eclipse-openj9/openj9-systemtest.git and some from github.com/adoptium/aqa-systemtest.git.

FYI @llxia

theresa-m · 2024-12-13T19:32:36Z

Most of the remaining failures are caused by a dependence on the security manager in the system test framework. I opened adoptium/STF#142.

Update: I'm going to disable these tests for now since this issue needs more discussion to be resolved.

theresa-m · 2024-12-18T15:05:21Z

fyi @JasonFengJ9 the failing system tests have been disabled adoptium/aqa-tests#5817

pshipton · 2025-01-28T14:15:14Z

There are many (all?) tests failing in special.system.
https://openj9-jenkins.osuosl.org/job/Pipeline-Special-System-JDK24/1/

theresa-m · 2025-01-28T14:30:52Z

There are many (all?) tests failing in special.system. https://openj9-jenkins.osuosl.org/job/Pipeline-Special-System-JDK24/1/

These should be fixed with adoptium/STF#143. I will run a grinder with these changes and see if any failures remain.

edit: there are so many special tests my build timed out but so far I don't see any failures https://hyc-runtimes-jenkins.swg-devops.com/view/Test_grinder/job/Grinder/47098/.

theresa-m · 2025-01-30T15:46:11Z

I have submitted changes to remove the system test framework's dependency on the SecurityManager and re-enable the previously failing system tests for JDK 24.
adoptium/aqa-tests#5928
adoptium/aqa-systemtest#494
adoptium/STF#143

JasonFengJ9 · 2025-02-03T20:02:19Z

The security manager API usages within the extension repo (JDK next and 24) should be removed.
https://github.com/ibmruntimes/openj9-openjdk-jdk/tree/openj9/closed/src
https://github.com/ibmruntimes/openj9-openjdk-jdk24/tree/openj9/closed/src

JasonFengJ9 · 2025-02-04T19:46:04Z

I think the following natives ~~can be removed~~ should be decorated with#if (JAVA_SPEC_VERSION == 8) && defined(WIN32).

openj9/runtime/j9vm/j7vmi.c

Line 358 in 56b489c

java_lang_J9VMInternals_doPrivileged(JNIEnv* env)

openj9/runtime/j9vm/j7vmi.c

Line 371 in 56b489c

java_lang_J9VMInternals_doPrivilegedWithException(JNIEnv* env)

and their helper method
https://github.com/eclipse-openj9/openj9/blob/56b489c685f259857c9c53138e2a1a5de417bc65/runtime/j9vm/j7vmi.c#L335C1-L335C24

JasonFengJ9 · 2025-02-04T20:09:58Z

There are a few AccessController.doPrivileged() usages at https://github.com/ibmruntimes/OpenJCEPlus/tree/semeru-java24
https://github.com/ibmruntimes/OpenJCEPlus/blob/922398c7dd7ab0fe725a35bfbbbbc958824ea1be/src/main/java/com/ibm/crypto/plus/provider/ock/Digest.java#L59
https://github.com/ibmruntimes/OpenJCEPlus/blob/922398c7dd7ab0fe725a35bfbbbbc958824ea1be/src/main/java/com/ibm/crypto/plus/provider/OpenJCEPlus.java#L83
https://github.com/ibmruntimes/OpenJCEPlus/blob/922398c7dd7ab0fe725a35bfbbbbc958824ea1be/src/main/java/com/ibm/crypto/plus/provider/OpenJCEPlusFIPS.java#L116
...

@jasonkatonica do you like some cleanup for JDK24+?

jasonkatonica · 2025-02-06T18:02:26Z

@jasonkatonica do you like some cleanup for JDK24+?

Yes we should do this as soon as we can.

pshipton added comp:vm JEP labels Nov 11, 2024

pshipton added this to the Java 24 milestone Nov 11, 2024

tajila assigned theresa-m Nov 11, 2024

pshipton mentioned this issue Nov 13, 2024

Support JEP 486: Permanently Disable the Security Manager #20586

Merged

theresa-m mentioned this issue Nov 18, 2024

JDK24: Permanently Disable the Security Manager #20625

Merged

theresa-m mentioned this issue Nov 28, 2024

URLClassLoaderTests NonExistJarTests.CheckForError1 fails from SecurityManager removal #20702

Closed

JasonFengJ9 added the comp:test label Dec 12, 2024

This was referenced Dec 18, 2024

Remove System.security field and getSecurityManager calls for JDK 24 #20851

Merged

JIT compile AccessController.doPrivileged in JDK 24+ #20859

Merged

theresa-m mentioned this issue Jan 15, 2025

Remove System.getSecurityManager calls from java.base and criu #20939

Merged

theresa-m mentioned this issue Jan 23, 2025

JDK24 remove System.getSecurityManager part 2 #21002

Merged

This was referenced Jan 29, 2025

JDK24 remove System.getSecurityManager part 3 #21039

Merged

JDK 24 remove java.security.AccessController.doPrivileged part 1 #21042

Merged

theresa-m mentioned this issue Feb 3, 2025

JDK 24 remove java.security.AccessController.doPrivileged part 2 #21061

Merged

babsingh mentioned this issue Feb 4, 2025

Disable Security Manager Tests #14412

Closed

This was referenced Feb 4, 2025

Remove AccessController.doPrivileged uses from closed/src ibmruntimes/openj9-openjdk-jdk24#19

Merged

Remove AccessController.doPrivileged uses from closed/src ibmruntimes/openj9-openjdk-jdk#932

Merged

theresa-m mentioned this issue Feb 4, 2025

Include J9VMInternals_doPrivileged methods for Java 8 Windows only #21068

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

JEP 486: Permanently Disable the Security Manager #20563

JEP 486: Permanently Disable the Security Manager #20563

pshipton commented Nov 11, 2024

github-actions bot commented Nov 11, 2024

pshipton commented Nov 11, 2024

tajila commented Nov 11, 2024

theresa-m commented Nov 12, 2024 •

edited

Loading

pshipton commented Nov 13, 2024

JasonFengJ9 commented Nov 13, 2024

theresa-m commented Dec 5, 2024 •

edited

Loading

JasonFengJ9 commented Dec 10, 2024 •

edited

Loading

theresa-m commented Dec 11, 2024

theresa-m commented Dec 12, 2024 •

edited

Loading

JasonFengJ9 commented Dec 12, 2024

theresa-m commented Dec 13, 2024 •

edited

Loading

theresa-m commented Dec 18, 2024

pshipton commented Jan 28, 2025

theresa-m commented Jan 28, 2025 •

edited

Loading

theresa-m commented Jan 30, 2025

JasonFengJ9 commented Feb 3, 2025

JasonFengJ9 commented Feb 4, 2025 •

edited

Loading

JasonFengJ9 commented Feb 4, 2025

jasonkatonica commented Feb 6, 2025

JEP 486: Permanently Disable the Security Manager #20563

JEP 486: Permanently Disable the Security Manager #20563

Comments

pshipton commented Nov 11, 2024

github-actions bot commented Nov 11, 2024

pshipton commented Nov 11, 2024

tajila commented Nov 11, 2024

theresa-m commented Nov 12, 2024 • edited Loading

pshipton commented Nov 13, 2024

JasonFengJ9 commented Nov 13, 2024

theresa-m commented Dec 5, 2024 • edited Loading

JasonFengJ9 commented Dec 10, 2024 • edited Loading

theresa-m commented Dec 11, 2024

theresa-m commented Dec 12, 2024 • edited Loading

JasonFengJ9 commented Dec 12, 2024

theresa-m commented Dec 13, 2024 • edited Loading

theresa-m commented Dec 18, 2024

pshipton commented Jan 28, 2025

theresa-m commented Jan 28, 2025 • edited Loading

theresa-m commented Jan 30, 2025

JasonFengJ9 commented Feb 3, 2025

JasonFengJ9 commented Feb 4, 2025 • edited Loading

JasonFengJ9 commented Feb 4, 2025

jasonkatonica commented Feb 6, 2025

theresa-m commented Nov 12, 2024 •

edited

Loading

theresa-m commented Dec 5, 2024 •

edited

Loading

JasonFengJ9 commented Dec 10, 2024 •

edited

Loading

theresa-m commented Dec 12, 2024 •

edited

Loading

theresa-m commented Dec 13, 2024 •

edited

Loading

theresa-m commented Jan 28, 2025 •

edited

Loading

JasonFengJ9 commented Feb 4, 2025 •

edited

Loading