Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v3]

2023-02-01 Thread Kevin Walls
On Tue, 31 Jan 2023 14:29:38 GMT, Kevin Walls wrote: >> The default setting for the ObjectInputFilter for JMX, introduced in jdk20, >> is too restrictive. >> javax.management.Attribute and AttributeList classes are also needed, and >> Query related classes. >> >> There are a number of Query-re

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v3]

2023-01-31 Thread Serguei Spitsyn
On Tue, 31 Jan 2023 14:29:38 GMT, Kevin Walls wrote: >> The default setting for the ObjectInputFilter for JMX, introduced in jdk20, >> is too restrictive. >> javax.management.Attribute and AttributeList classes are also needed, and >> Query related classes. >> >> There are a number of Query-re

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v3]

2023-01-31 Thread Chris Plummer
On Tue, 31 Jan 2023 14:29:38 GMT, Kevin Walls wrote: >> The default setting for the ObjectInputFilter for JMX, introduced in jdk20, >> is too restrictive. >> javax.management.Attribute and AttributeList classes are also needed, and >> Query related classes. >> >> There are a number of Query-re

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v2]

2023-01-31 Thread Kevin Walls
On Mon, 30 Jan 2023 20:24:16 GMT, Serguei Spitsyn wrote: >> Kevin Walls has updated the pull request incrementally with two additional >> commits since the last revision: >> >> - filter properties update: more classes logged as ALLOWED during wider >> testing >> - Add a Notification test > >

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v2]

2023-01-31 Thread Kevin Walls
On Mon, 30 Jan 2023 21:20:55 GMT, Chris Plummer wrote: >> It's "not everything else". >> >> https://docs.oracle.com/en/java/javase/19/core/serialization-filtering1.html >> >> "If a class name doesn’t match any filter, then it is allowed. If you want >> to allow only certain class names, then y

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v3]

2023-01-31 Thread Kevin Walls
> The default setting for the ObjectInputFilter for JMX, introduced in jdk20, > is too restrictive. > javax.management.Attribute and AttributeList classes are also needed, and > Query related classes. > > There are a number of Query-related classes, so adding javax.management.* is > appropriate

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v2]

2023-01-30 Thread Chris Plummer
On Mon, 30 Jan 2023 20:11:06 GMT, Kevin Walls wrote: >> src/jdk.management.agent/share/conf/management.properties line 323: >> >>> 321: java.rmi.dgc.*;\ >>> 322: java.rmi.server.*;\ >>> 323: javax.security.auth.Subject;!* >> >> What does the ! at the end indicate? > > It's "not everything else"

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v2]

2023-01-30 Thread Serguei Spitsyn
On Wed, 18 Jan 2023 17:56:43 GMT, Kevin Walls wrote: >> The default setting for the ObjectInputFilter for JMX, introduced in jdk20, >> is too restrictive. >> javax.management.Attribute and AttributeList classes are also needed, and >> Query related classes. >> >> There are a number of Query-re

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v2]

2023-01-30 Thread Kevin Walls
On Mon, 30 Jan 2023 19:21:37 GMT, Chris Plummer wrote: >> Kevin Walls has updated the pull request incrementally with two additional >> commits since the last revision: >> >> - filter properties update: more classes logged as ALLOWED during wider >> testing >> - Add a Notification test > > s

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v2]

2023-01-30 Thread Chris Plummer
On Wed, 18 Jan 2023 17:56:43 GMT, Kevin Walls wrote: >> The default setting for the ObjectInputFilter for JMX, introduced in jdk20, >> is too restrictive. >> javax.management.Attribute and AttributeList classes are also needed, and >> Query related classes. >> >> There are a number of Query-re

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v2]

2023-01-30 Thread Kevin Walls
On Wed, 18 Jan 2023 17:56:43 GMT, Kevin Walls wrote: >> The default setting for the ObjectInputFilter for JMX, introduced in jdk20, >> is too restrictive. >> javax.management.Attribute and AttributeList classes are also needed, and >> Query related classes. >> >> There are a number of Query-re

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v2]

2023-01-18 Thread Daniel Fuchs
On Wed, 18 Jan 2023 17:56:43 GMT, Kevin Walls wrote: >> The default setting for the ObjectInputFilter for JMX, introduced in jdk20, >> is too restrictive. >> javax.management.Attribute and AttributeList classes are also needed, and >> Query related classes. >> >> There are a number of Query-re

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed [v2]

2023-01-18 Thread Kevin Walls
> The default setting for the ObjectInputFilter for JMX, introduced in jdk20, > is too restrictive. > javax.management.Attribute and AttributeList classes are also needed, and > Query related classes. > > There are a number of Query-relate classes, so adding javax.management.* is > appropriate

Re: [jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed

2023-01-11 Thread Daniel Fuchs
On Wed, 11 Jan 2023 09:40:11 GMT, Kevin Walls wrote: > The default setting for the ObjectInputFilter for JMX, introduced in jdk20, > is too restrictive. > javax.management.Attribute and AttributeList classes are also needed, and > Query related classes. > > There are a number of Query-relate c

[jdk20] RFR: 8299891: JMX ObjectInputFilter additional classes needed

2023-01-11 Thread Kevin Walls
The default setting for the ObjectInputFilter for JMX, introduced in jdk20, is too restrictive. javax.management.Attribute and AttributeList classes are also needed, and Query related classes. There are a number of Query-relate classes, so adding javax.management.* is appropriate otherwise the