RE: Bypassing security manager checks (was: Re: Infinite loop)

[Jeroen Frijters]

Gary Benson wrote:
> > That's not exactly true. The system class loader does enforce that
> > user code cannot access classes in protected packages. It's just
> > that we don't have the proper security configuration files in place
> > to define the protected packages yet.
> 
> You make it sound like an easy fix: is it?
> What needs to be done, and where?

The security properties file needs a line:
package.access=gnu.classpath.

and the security policy should not include
RuntimePermission("accessClassInPackage.gnu.classpath").

Regards,
Jeroen