JDK-8017212 : File.createTempFile requires unnecessary "read" permission
- Type: Bug
- Component: core-libs
- Sub-Component: java.io
- Affected Version: 6u85,7u40,8
- Priority: P2
- Status: Closed
- Resolution: Fixed
- Submitted: 2013-06-20
- Updated: 2015-02-02
- Resolved: 2013-07-11
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
| JDK 6 | JDK 7 | JDK 8 |
|---|---|---|
| 6u91Fixed | 7u76Fixed  |
8 b100Fixed |
Description
This is the regression introduced with fix for JDK-8013827. The code now checks if file exists before creating new temp file as oppose to earlier where an attempt was made to create file.
Code snippet:
File f;
try {
do {
f = TempDirectory.generateFile(prefix, suffix, tmpdir);
} while (f.exists());
if (!f.createNewFile())
throw new IOException("Unable to create temporary file");
} catch (SecurityException se) {
The call to f.exists now needs "read" permission to be provided for applications which only need to write temp file.
Error:
java.security.AccessControlException: access denied
Exception stack trace:
java.security.AccessControlException: access denied ("java.io.FilePermission" "/tmp/abcd#4910205138484207578.tmp" "read")
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:453)
at java.security.AccessController.checkPermission(AccessController.java:820)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
at java.io.File.exists(File.java:814)
at java.io.File.createTempFile(File.java:2003)
Comments
|