Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow Policy to restrict loading of classes to Signed or message digest checked jar files. #5

Closed
pfirmstone opened this issue Oct 31, 2024 · 1 comment
Closed

Allow Policy to restrict loading of classes to Signed or message digest checked jar files. #5

pfirmstone opened this issue Oct 31, 2024 · 1 comment

Comments

@pfirmstone
Copy link
Owner

The JVM has no mechanism to prevent loading of classes from untrusted sources.
pfirmstone added a commit that referenced this issue Nov 1, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
7a6992f 
…st checked jar files. #5

Added LoadClassPermission, modified SecureClassLoader to check the CodeSource has LoadClassPermission before loading.
pfirmstone added a commit that referenced this issue Nov 15, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
cd25351 
…st checked jar files. #5

Preliminary code to remove permission implementations from Java API, use a Service (Provider may be more appropriate).

Note that for user permissions we want to use a module containing the permission to effectively represent a domain with minimal permission on the call stack, to allow permissions granted to a user to be the limiting factor.

We likely need separate modules for code and user granted permissions.   Eg LoadClassPermission is granted to a Signer, or positive message digest is a code based permission.
pfirmstone added a commit that referenced this issue Nov 15, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
748b705 
…st checked jar files. #5

SecureClassLoader is a bootstrap class and cannot use higher level language features.
pfirmstone added a commit that referenced this issue Nov 19, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
cf1d45a 
…st checked jar files. #5

Added LoadClassPermission, modified SecureClassLoader to check the CodeSource has LoadClassPermission before loading.
pfirmstone added a commit that referenced this issue Nov 19, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
9e79f63 
…st checked jar files. #5

Preliminary code to remove permission implementations from Java API, use a Service (Provider may be more appropriate).

Note that for user permissions we want to use a module containing the permission to effectively represent a domain with minimal permission on the call stack, to allow permissions granted to a user to be the limiting factor.

We likely need separate modules for code and user granted permissions.   Eg LoadClassPermission is granted to a Signer, or positive message digest is a code based permission.
pfirmstone added a commit that referenced this issue Nov 19, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
e626cfc 
…st checked jar files. #5

SecureClassLoader is a bootstrap class and cannot use higher level language features.
@pfirmstone
Copy link
Owner Author

For now, I've decided to not copy httmd message digests from JGDMS, as these are for network file connections, we'll look at implementing message digests at a later date for files, Policy can restrict loading with Signer certificate's.

@pfirmstone pfirmstone reopened this Nov 30, 2024
pfirmstone added a commit that referenced this issue Nov 30, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
9d76b2c 
…st checked jar files. #5

Fix tests impacted by LoadPermission
pfirmstone added a commit that referenced this issue Dec 1, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
b7b74d8 
…st checked jar files. #5

Fix tests broken by LoadClassPermission.
pfirmstone added a commit that referenced this issue Dec 2, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
e740e3e 
…st checked jar files. #5

Fix test failures caused by LoadClassPermission
pfirmstone added a commit that referenced this issue Dec 2, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
3aa1240 
…st checked jar files. #5

Fix test failures caused by LoadClassPermission
pfirmstone added a commit that referenced this issue Dec 2, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
8749312 
…st checked jar files. #5

Fix test failures caused by LoadClassPermission
pfirmstone added a commit that referenced this issue Dec 5, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
13ac5bd 
…st checked jar files. #5

Fix test failure cause by missing LoadClassPermission
pfirmstone added a commit that referenced this issue Dec 5, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
4a4be23 
…st checked jar files. #5

Fix test failure caused by missing LoadClassPermission
pfirmstone added a commit that referenced this issue Dec 5, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
eeea9ee 
…st checked jar files. #5

Fix test failures caused by LoadClassPermission
pfirmstone added a commit that referenced this issue Dec 6, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
6f92969 
…st checked jar files. #5

Fix test failure caused by LoadClassPermission
pfirmstone added a commit that referenced this issue Dec 6, 2024
@pfirmstone
Allow Policy to restrict loading of classes to Signed or message dige…
8dcb3da 
…st checked jar files. #5

Fix text failure cause by missing LoadClassPermission
@pfirmstone pfirmstone mentioned this issue Dec 14, 2024
Merged
@pfirmstone pfirmstone mentioned this issue Dec 30, 2024
Closed
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@pfirmstone