JDK-7109885 : security baseline for 7u2 or above is not set correctly
Type:Bug
Component:deploy
Sub-Component:deployment_toolkit
Affected Version:7
Priority:P2
Status:Closed
Resolution:Fixed
OS:windows
CPU:x86
Submitted:2011-11-09
Updated:2013-09-12
Resolved:2012-01-13
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed. Resolved: Release in which this issue/RFE has been resolved. Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
security baseline for 7u2 or above is not set correctly
currently - the security baseline for 7u2 is set at 7u2.
it should be 7u1 instead.
Comments
EVALUATION
see MR
20-12-2011
EVALUATION
problem is specific only to apps requesting JRE 7u1 specifically. and for machines that has 7u1 + FX 2.0.2, there will not be ssv dialog shown either when running apps.
not a showstopper for jre 7u2.
10-11-2011
EVALUATION
problem is in SecurityBaseline.java
it's missing getBaselineVersion170() now. (and simply return CURRENT_VERSION - which is the bug)
private static String getBaselineVersion(String requestedVersion) {
if (requestedVersion.startsWith("1.3.1")) {
return getBaselineVersion131();
} else if (requestedVersion.startsWith("1.4.2")) {
return getBaselineVersion142();
} else if (requestedVersion.startsWith("1.5")) {
return getBaselineVersion150();
} else if (requestedVersion.startsWith("1.6")) {
return getBaselineVersion160();
} else {
return CURRENT_VERSION;
}
}