Skip to content

Add a restricted security policy for CRIU #592

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
ZainabF92 wants to merge 2 commits into
base: openj9
Choose a base branch
from
Draft

Add a restricted security policy for CRIU #592

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
8a57641
Java Restricted Security Mode
taoliult Sep 11, 2022
1fb2d90
Add a restricted security policy for CRIU
Nov 14, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 9 additions & 9 deletions ...openj9/internal/criu/CRIUSECProvider.java → ...classes/openj9/internal/criu/CRIUSEC.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,21 +28,21 @@
import java.security.Provider;

/**
* The CRIUSECProvider is a security provider that is used as follows when CRIU
* is enabled. During the checkpoint phase, all other security providers are
* removed, except CRIUSECProvider, and the digests are cleared, to ensure that
* no state is saved during checkpoint that is then restored during the restore
* phase. During the resore phase, CRIUSECProvider is removed and the other
* security providers are added back.
* The CRIUSEC is a security provider that is used as follows when CRIU is
* enabled. During the checkpoint phase, all other security providers are
* removed, except CRIUSEC, and the digests are cleared, to ensure that no
* state is saved during checkpoint that is then restored during the restore
* phase. During the resore phase, CRIUSEC is removed and the other security
* providers are added back.
*/
public final class CRIUSECProvider extends Provider {
public final class CRIUSEC extends Provider {
Copy link
Author

@ZainabF92 ZainabF92 Nov 14, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

FYI: The provider name needs to be the same as the class name, since the class name is used by the restrictive mode configurator to determine if a provider is allowed or not.


private static final long serialVersionUID = -3240458633432287743L;

public CRIUSECProvider() {
public CRIUSEC() {
super("CRIUSEC", "1", "CRIUSEC Provider");

String packageName = CRIUSECProvider.class.getPackage().getName() + ".";
String packageName = CRIUSEC.class.getPackage().getName() + ".";

String[] aliases = new String[] { "SHA",
"SHA1",
Expand Down
159 changes: 0 additions & 159 deletions closed/src/java.base/share/classes/openj9/internal/security/FIPSConfigurator.java
View file
Open in desktop

This file was deleted.

Loading