JDK-8161307 : Release Note: De-privileged module permissions granted by default
  • Type: Sub-task
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 9
  • Priority: P2
  • Status: Closed
  • Resolution: Delivered
  • Submitted: 2016-07-13
  • Updated: 2017-09-22
  • Resolved: 2016-08-01
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 9
9Resolved
Description
When using a `SecurityManager`, the permissions required by JDK modules are granted by default, and are not dependent on the `policy.url` properties that are set in the `java.security` file.

This also applies if you are setting the `java.security.policy` system property with either the '=' or '==' option.