Skip to content

Use of the SecurityManager #1617

@srdo

Description

@srdo

The Worker uses the SecurityManager to prevent System.exit. The SM is deprecated for removal, and will be going away soon.

Previously, we've been punting on this issue by enabling the SM for Java 17+, but this won't continue to work.

The linked JEP contains source for a Java agent, which could be used to block System.exit (see the JEP appendix), but I'm wondering if we'd be better off just removing the SM code and not replacing it?

Do people actually have a lot of code they need to test with rules_scala, which calls System.exit, making it worth trying to block?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions