JDK-8338411 : Implement JEP 486: Permanently Disable the Security Manager
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: java.security
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2024-08-14
  • Updated: 2025-12-08
  • Resolved: 2024-11-12
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 24
24 b24Fixed
Related Reports
Blocks :  
JDK-8342280 - Deprecate for removal java.awt.AWTPermission
Blocks :  
JDK-8338625 - JEP 486: Permanently Disable the Security Manager
Blocks :  
JDK-8341916 - Remove ProtectionDomain related hotspot code and tests
Blocks :  
JDK-8344252 - SM cleanup in java.util classes
Blocks :  
JDK-8344039 - Remove security manager dependency in java.time
Blocks :  
JDK-8344034 - Remove security manager dependency in Serialization
Blocks :  
JDK-8342281 - Deprecate for removal javax.sound.sampled.AudioPermission
Blocks :  
JDK-8344562 - Remove security manager dependency from module jdk.jdi
Blocks :  
JDK-8344446 - Remove security manager dependency from module jdk.sctp
Blocks :  
JDK-8344319 - SM cleanup in jdk.dynalink module
Blocks :  
JDK-8344078 - Remove security manager dependency in java.nio
Blocks :  
JDK-8344077 - Remove security manager dependency in java.io
Blocks :  
JDK-8343958 - Remove security manager impl in java.lang.Process and java.lang.Runtime.exec
CSR :  
JDK-8338412 - Implement JEP 486: Permanently Disable the Security Manager
Relates :  
JDK-8344057 - Remove doPrivileged calls from unix platform sources in the java.desktop module
Relates :  
JDK-8344215 - Remove calls to SecurityManager and doPrivileged in java.net.Socket and java.net.ServerSocket after JEP 486 integration
Relates :  
JDK-8344059 - Remove doPrivileged calls from windows platform sources in the java.desktop module
Relates :  
JDK-8195743 - FileTreeWalker low performance with SecurityManager installed
Relates :  
JDK-8342012 - javax/swing/JPopupMenu/6694823/bug6694823.java fails Windows, Linux after SM removal
Relates :  
JDK-8341090 - Remove support for security manager from JavaFX
Relates :  
JDK-8344330 - Remove AccessController.doPrivileged() from jdk.charsets module
Relates :  
JDK-8344105 - Remove SecurityManager and related calls from jdk.attach and jdk.hotspot.agent
Relates :  
JDK-8344177 - Remove SecurityManager and related calls from java.management
Relates :  
JDK-8344181 - Remove SecurityManager and related calls from jdk.management and jdk.management.agent
Relates :  
JDK-8344219 - Remove calls to SecurityManager and doPrivileged in java.net.SocksSocketImpl after JEP 486 integration
Relates :  
JDK-8051403 - (aio) AsynchronousChannelGroup.withXXXThreadPool uses wrong ThreadFactory
Relates :  
JDK-8342638 - java/awt/Robot/InfiniteLoopException.java fails with OOME after JEP486
Relates :  
JDK-8344992 - Remove Security Manager dependencies from java.security.cert API and implementations
Relates :  
JDK-8345060 - Remove Security Manager dependencies from java.security.KeyStore and Identity APIs and implementations
Relates :  
JDK-8344212 - Bring back @see GraphicsConfiguration to MouseInfo.getPointerInfo()
Relates :  
JDK-8343219 - Manual clientlibs test failures after SM removal
Relates :  
JDK-8344652 - Remove access control context text from SSLEngine and SSLSession APIs
Relates :  
JDK-8344788 - Specify that the access control context parameters of Subject.doAsPrivileged are ignored
Relates :  
JDK-8344949 - javax.security.auth.Subject.SecureSet.writeObject does not do a security check anymore
Relates :  
JDK-8345065 - Cleanup DomainCombiner, SubjectDomainCombiner, Subject, and PrivilegedAction specifications
Relates :  
JDK-8345502 - Remove doIntersectionPrivilege methods
Relates :  
JDK-8344337 - SecurityManager cleanup in java.prefs module
Relates :  
JDK-8345153 - Clean up SecurityManager references from jdk.compiler module
Relates :  
JDK-8346045 - Cleanup of security library tests calling Security Manager APIs
Relates :  
JDK-8344120 - Remove Security Manager dependencies from jdk.crypto.cryptoki module
Relates :  
JDK-8344147 - Remove Security Manager dependencies from java.security.sasl module
Relates :  
JDK-8344214 - Remove Security Manager dependencies from jdk.crypto.mscapi module
Relates :  
JDK-8344248 - Remove Security Manager dependencies from java.security.jgss and jdk.security.jgss modules
Relates :  
JDK-8344310 - Remove Security Manager dependencies from javax.crypto and com.sun.crypto packages
Relates :  
JDK-8344366 - Remove Security Manager dependencies from javax.net.ssl and sun.security.ssl packages
Relates :  
JDK-8344397 - Remove Security Manager dependencies from java.security and sun.security packages
Relates :  
JDK-8344420 - Remove Security Manager dependencies from javax.security package
Relates :  
JDK-8348967 - Deprecate security permission classes for removal
Relates :  
JDK-8334493 - Remove SecurityManager Permissions infrastructure from DiagnosticCommands
Relates :  
JDK-8345510 - launcher.err.security.manager resource property can be removed
Relates :  
JDK-8344058 - Remove doPrivileged calls from macos platform sources in the java.desktop module
Description
This is the implementation of JEP 486.
Comments
Changeset: db850905 Branch: master Author: Sean Mullan <mullan@openjdk.org> Date: 2024-11-12 17:16:15 +0000 URL: https://git.openjdk.org/jdk/commit/db85090553ab14a84c3ed0a2604dd56c5b6e6982
12-11-2024
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk/pull/21498 Date: 2024-10-14 13:52:24 +0000
15-10-2024