Document security policy grant required for non-Semeru JDKs - #1728
Document security policy grant required for non-Semeru JDKs#1728taoliult wants to merge 1 commit into
Conversation
08c0d7f to
a4e5c57
Compare
|
|
||
| **NOTE**: This section applies only when the JVM Security Manager is enabled. The Security Manager was deprecated in Java 17 and removed in Java 24. | ||
|
|
||
| When running on a JDK that does **not** bundle `OpenJCEPlus` (i.e., any JDK other than IBM Semeru), the JVM security manager requires an explicit policy grant so that the `openjceplus` module can perform the operations it needs. Without this grant, you may encounter `AccessControlException` errors at runtime. |
There was a problem hiding this comment.
I wouldn't refer to it as a module since it's not one in every JDK other than Semeru.
There was a problem hiding this comment.
If we should avoid using the term "module" here, would it be better to replace it with "provider" or "code"? Like "openjceplus provider" or "openjceplus code", or any other suggestions?
There was a problem hiding this comment.
Given that your are talking about "operations it needs", I think code is more appropriate. @jasonkatonica what do you think?
There was a problem hiding this comment.
openjceplus code sounds good to me also given this is not always a module ( unless you count this code running on the unnamed module as a module )
There was a problem hiding this comment.
Or just openjceplus, without code or module, like "so that the openjceplus can perform the operations it needs." @jasonkatonica @KostasTsiounis
There was a problem hiding this comment.
I don't think it reads as well that way.
There was a problem hiding this comment.
Updated. Just use openjceplus, without referring to it as a module or code.
da85923 to
21f1f8a
Compare
Users on JDKs other than IBM Semeru must manually add the openjceplus grant block to their JDK policy file. Add a new README section with the full grant, setup steps, and a note on the file: codeBase alternative for JAR-based installations. Signed-off-by: Tao Liu <tao.liu@ibm.com>
1f568a1 to
ffa2cbe
Compare
4 participants
Users on JDKs other than IBM Semeru must manually add the openjceplus grant block to their JDK policy file. Add a new README section with the full grant, setup steps, and a note on the file: codeBase alternative for JAR-based installations.