ant-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stefan Bodewig <bode...@apache.org>
Subject Re: Impact of Java SecurityManager being deprecated for removal post Java 17
Date Thu, 19 Aug 2021 10:01:17 GMT
On 2021-08-19, Jaikiran Pai wrote:

> On 19/08/21 1:15 pm, Stefan Bodewig wrote:

>> ... One migration option might be to offer an antlib containing the
>> permissions stuff and deprecate the core types - and remove them from
>> core once the next Java LTS version without SecurityManager arrives.

> This is an interesting point. It would however mean that core Ant will
> now depend on an (in theory external) antlib.

Avtually I wouldn't make core depend on it but tell people to use this
antlib if they need permissions support. This antlib may need to come
with its own version of a java task for things to work.

> I haven't checked if we already have such dependencies and if not,
> whether it's OK to add such a dependency.

No, we haven't. In the beginning Ant has been very proud of the fact
that you could bootstrap it with a pretty trivial shell script and the
only dependencies except for the JDK has been an XML parser - this has
been before JAXP became part of the Java class library, i.e. Java prior
to 1.3.

Of course the pretty trivial shell script is not so trivial anymore, but
it still holds that all pieces of Ant we consider core do not have any
external dependency at all. Personally I appreciate this property, but
that may just be me.

> Furthermore, to make this usable/backward compatible, we would have to
> use the same package namespace for this permissions stuff in that new
> antlib jar, which I think can cause issues when the same package
> "org.apache.tools.ant.types" is now loaded/available in 2 separate
> CodeSources (jars) - one in core Ant jar and one in this antlib jar.

I didn't mean the Antlib to be backwards compatible, but rather to offer
it and tell people to switch over to it. It would be the first time we'd
remove a core feature of Ant completely, though, so we may need to
discuss whether there is a better migration path. We have moved some
source code management tool specific tasks to antlibs in the past, but
never a core part.

Stefan

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org


Mime
View raw message