Re: Several question about JEP 486

2024-10-07 Thread Peter Firmstone
Hi Lim, You raise a good point about how to prevent loading unauthorized code.  I'm interested to see the responses you'll get. I think OpenJDK was overly focused on sandboxes, applets and serialization, instead of authorization and principles of least privilege, where the focus should have

Several question about JEP 486

2024-10-03 Thread Lim
Hi, I have some questions about this JEP. Will something similar to Python's audit hooks[1][2] be considered, to give transparency what is happening inside, so that jvm behavior can be monitored - such as a security agent (it can interact with Antimalware Scan Interface (AMSI)[3]). Currently with