Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #27298

Re: New Java JDK released

Show all headers | View raw

Before any rumors get started, here's what the release notes actually say:

"The default socket permissions assigned to all code including untrusted 
code have been changed in this release. Previously, all code was able to 
bind any socket type to any port number greater than or equal to 1024. 
It is still possible to bind sockets to the ephemeral port range on each 
system...

"Applications using datagram sockets or server tcp sockets (and a 
security manager) may encounter security exceptions where none were seen 
before. If this occurs, users should review whether the port number 
being requested is expected, and if this is the case, a socket 
permission grant can be added to the local security policy, to resolve 
the issue."


So you might have to change the default configuration IF you are also 
using the security manager, but that's it.

http://www.oracle.com/technetwork/java/javase/7u51-relnotes-2085002.html



On 1/15/2014 11:28 AM, Donkey Hottie wrote:
> 15.01.2014 16:43, Silvio kirjoitti:
>> On 01/15/2014 06:45 AM, Roedy Green wrote:
>>> Java 1.7.9_51 was released today.
>>>
>>
>> Did anyone try it to see what the impact of the restriction for server
>> sockets to the "ephemeral port range" is? I am running heaps of servlet
>> container processes on a cluster of Linux servers and this change seems
>> to prohibit listening on sockets in the range 1024-<way high>.
>>
>> Why on earth did they do that?
>>
>> Silvio
>>
>
> If that is true, it breaks most if not all application servers out
> there. They are normally run as non root, and listening high ports.
>

Back to comp.lang.java.programmer | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

New Java JDK released Roedy Green <see_website@mindprod.com.invalid> - 2014-01-14 21:45 -0800
  Re: New Java JDK released "Qu0ll" <Qu0llSixFour@gmail.com> - 2014-01-15 18:30 +1100
    Re: New Java JDK released Roedy Green <see_website@mindprod.com.invalid> - 2014-01-15 03:37 -0800
      Re: New Java JDK released Arne Vajhøj <arne@vajhoej.dk> - 2014-01-15 22:24 -0500
        Re: New Java JDK released Joerg Meier <joergmmeier@arcor.de> - 2014-01-16 12:41 +0100
  Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-15 15:43 +0100
    Re: New Java JDK released Donkey Hottie <donkey@fredriksson.dy.fi> - 2014-01-15 21:28 +0200
      Re: New Java JDK released markspace <markspace@nospam.nospam> - 2014-01-15 11:46 -0800
        Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-15 23:34 +0100
          Re: New Java JDK released markspace <markspace@nospam.nospam> - 2014-01-15 14:41 -0800
            Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-16 01:14 +0100
              Re: New Java JDK released Arne Vajhøj <arne@vajhoej.dk> - 2014-01-15 22:18 -0500
                Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-16 09:08 +0100
                Re: ephemeral ports [was: New Java JDK released] Wayne <nospam@all.invalid> - 2014-01-16 04:21 -0500
                Re: ephemeral ports [was: New Java JDK released] Silvio <silvio@internet.com> - 2014-01-16 10:35 +0100
                Re: ephemeral ports [was: New Java JDK released] lipska the kat <lipskathekat@example.com> - 2014-01-16 09:42 +0000
                Re: New Java JDK released Knute Johnson <eternal@knutejohnson.com> - 2014-01-16 09:29 -0800
          Re: New Java JDK released Kevin McMurtrie <mcmurtrie@pixelmemory.us> - 2014-01-15 18:46 -0800
            Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-16 08:50 +0100
              Re: New Java JDK released Joerg Meier <joergmmeier@arcor.de> - 2014-01-16 12:45 +0100
                Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-16 13:05 +0100
    Re: New Java JDK released Roedy Green <see_website@mindprod.com.invalid> - 2014-01-15 16:14 -0800
      Re: New Java JDK released Silvio <silvio@internet.com> - 2014-01-16 01:19 +0100
        Re: New Java JDK released Roedy Green <see_website@mindprod.com.invalid> - 2014-01-17 01:47 -0800
  Re: New Java JDK released Michal Kleczek <michal_wytnijto@kleczek.org> - 2014-01-16 11:37 +0100

csiph-web