Get the latest tech news
OpenJDK Authorization
JDK main-line development. Contribute to pfirmstone/jdk-with-authorization development by creating an account on GitHub.
This tool automates writing of your policy files, using principles of least privilege, this creates a minefield of SecurityException's for attackers to navigate inside your perimeter defences. Permissions will not be granted to load transitive dependencies or modules you don't use, Serialization will be limited to only the classes used in your deployment staging environment. On the other hand, JGDMS policy implementation is high scaling modern concurrent code, taking advantage of mutability and thread confinement, RFC3986 URI are used instead of DNS calls, all hotspots have been analysed and removed, even string case conversion uses bitshift operations.
Or read this on Hacker News