Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!eternal-september.org!feeder.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail From: markspace Newsgroups: comp.lang.java.programmer Subject: Re: New Java JDK released Date: Wed, 15 Jan 2014 11:46:08 -0800 Organization: A noiseless patient Spider Lines: 44 Message-ID: References: <52d69e7f$0$2945$e4fe514c@news2.news.xs4all.nl> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Injection-Date: Wed, 15 Jan 2014 19:46:13 +0000 (UTC) Injection-Info: mx05.eternal-september.org; posting-host="9358cda03e1e0dfd3c4b757daa608707"; logging-data="27172"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/EiZu6/zNGacHn1lg+rzmJcMsA02tdE14=" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 In-Reply-To: Cancel-Lock: sha1:oYKqJhdFAnhN+DmHthOw8YnFVyw= Xref: csiph.com comp.lang.java.programmer:27298 Before any rumors get started, here's what the release notes actually say: "The default socket permissions assigned to all code including untrusted code have been changed in this release. Previously, all code was able to bind any socket type to any port number greater than or equal to 1024. It is still possible to bind sockets to the ephemeral port range on each system... "Applications using datagram sockets or server tcp sockets (and a security manager) may encounter security exceptions where none were seen before. If this occurs, users should review whether the port number being requested is expected, and if this is the case, a socket permission grant can be added to the local security policy, to resolve the issue." So you might have to change the default configuration IF you are also using the security manager, but that's it. http://www.oracle.com/technetwork/java/javase/7u51-relnotes-2085002.html On 1/15/2014 11:28 AM, Donkey Hottie wrote: > 15.01.2014 16:43, Silvio kirjoitti: >> On 01/15/2014 06:45 AM, Roedy Green wrote: >>> Java 1.7.9_51 was released today. >>> >> >> Did anyone try it to see what the impact of the restriction for server >> sockets to the "ephemeral port range" is? I am running heaps of servlet >> container processes on a cluster of Linux servers and this change seems >> to prohibit listening on sockets in the range 1024-. >> >> Why on earth did they do that? >> >> Silvio >> > > If that is true, it breaks most if not all application servers out > there. They are normally run as non root, and listening high ports. >