JDK-6953324 : Please add more options to the list of secure jnlp properties
  • Type: Enhancement
  • Component: deploy
  • Sub-Component: webstart
  • Affected Version: 6,6u20
  • Priority: P2
  • Status: Resolved
  • Resolution: Fixed
  • OS: generic,windows_xp
  • CPU: generic,x86
  • Submitted: 2010-05-18
  • Updated: 2013-09-12
  • Resolved: 2010-10-11
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 6 JDK 7
6u23 b02Fixed 7Fixed
Related Reports
Duplicate :  
Duplicate :  
Relates :  
Description
As customers are beginning to create and deploy huge 64 bit client (GUI)
based applications via Java Webstart (jnlp), the demand for GC tuning on the 
client side increases.
Unfortunately there is currently only a very limited set of GC options
available in the list of supported java-vm-args:
http://java.sun.com/javase/6/docs/technotes/guides/javaws/developersguide/syntax.html
Anything not listed is being ignored silently.

It is understood that any option can be used if the application is fully trusted,
which means, also the jnlp file has to be signed. However, many customers create
and customize jnlp files on the fly. So they cannot easily use this approach.

The RFE is to increase the list of supported options starting with the following:

Prio 1:

-XX:+PrintGCDetails 		
-XX:+PrintGCTimeStamps 
-XX:+TraceClassUnloading 
-XX:+PrintHeapAtGC 
-XX:PrintCMSStatistics
-XX:+PrintTenuringDistribution 
-XX:SurvivorRatio
-XX:MaxTenuringThreshol
-XX:CMSMarkStackSize
-XX:CMSMarkStackSizeMax
-XX:+UseConcMarkSweepGC 
-XX:+CMSClassUnloadingEnabled 
-XX:+CMSIncrementalMode 
-XX:CMSIncrementalDutyCycleMin
-XX:+CMSIncrementalPacing 
-XX:-ParallelRefProcEnabled 
-XX:ParallelGCThreads
-XX:ParallelCMSThreads
-XX:+CMSClassUnloadingEnabled
-XX:CMSInitiatingOccupancyFraction
-XX:+DisableExplicitGC
-XX:+UseCompressedOops

Prio 2:
-XX:+UseG1GC
-XX:GCPauseIntervalMillis
-XX:MaxGCPauseMillis
also need :sun.lang.ClassLoader.allowArraySyntax=true
(closing this seperate bug as a dupe)
Also add support for   
     -Dsun.lang.ClassLoader.allowArraySyntax=true
(This property is needed to woraround for the bug 6434149  for JAVA 1.6 )

See see also bugs for more details.

Comments
EVALUATION I have discussed these options with security group and confirm that those options are safe to include in our secure JVM args list.
09-09-2010

EVALUATION we will meet with security team to see which ones we can include in 6u23
18-05-2010