Uploaded image for project: 'XNIO'
  1. XNIO
  2. XNIO-323

"listen" SocketPermission is required even when no binding is needed

    Details

    • Steps to Reproduce:
      Hide

      cd wildfly/testsuite/integration/basic
      mvn clean test -Dtest=HttpInvocationInContainerTestCase -Dsecurity.manager

      Show
      cd wildfly/testsuite/integration/basic mvn clean test -Dtest=HttpInvocationInContainerTestCase -Dsecurity.manager

      Description

      As observed in WEJBHTTP-19, Xnio requires "("java.net.SocketPermission" "localhost:0" "listen,resolve")" permission even for outbound connection when bind() call could be omitted.

      It would be sufficient to not replace null by INET_ANY_ADDRESS in
      https://github.com/xnio/xnio/blob/3.6.3.Final/api/src/main/java/org/xnio/XnioIoThread.java#L254 and bind() operation would be skipped and no listen permission would be needed.

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  honza889 Jan Kalina
                  Reporter:
                  honza889 Jan Kalina
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  1 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: