JDK-8019830 : Add com.sun.media.sound to the list of restricted packages
  • Type: Task
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 8
  • Priority: P3
  • Status: Closed
  • Resolution: Fixed
  • OS: generic
  • CPU: generic
  • Submitted: 2013-07-03
  • Updated: 2017-05-17
  • Resolved: 2013-08-27
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 8
8 b106Fixed
Description
com.sun.media.sound should be added to the list of restricted packages in JDK 8. This means applications running under a SecurityManager will not be able to access classes in this package hierarchy unless granted explicit permission. com.sun.media.sound is an internal, unsupported package and is not meant to be used by external applications.
Comments
Release notes suggested text: scope = JDK "com.sun.media.sound has been added to list of restricted packages in JDK 8. Applications running under a SecurityManager will not be able to access classes in this package hierarchy unless granted explicit permission. com.sun.media.sound is an internal, unsupported package and is not meant to be used by external applications."
21-08-2013
We had a discussion with Sean and Phil and found that com.sun.media contains other sub-packages than sound (although only com.sun.media.sound is shipped with JDK). So it makes sense to restrict com.sun.media.sound only and leave all other com.sun.media packages unrestricted.
21-08-2013
Will do.
05-07-2013
I agree, CCC should be filed since this is an existing (not new) package. Can you do that, Artem?
05-07-2013
If there's a chance that this is used by applications then I think we should submit a CCC so that the compatibility impact is assessed.
05-07-2013