The SecurityManager is going to be disabled permanently in JDK-24 (see please https://openjdk.org/projects/jdk/24/). The purpose of this issue is to explore the possible replacements or/and suggest path forward. So far we have identified the following options:
maintain OpenJDK fork (as mentioned by @pfirmstone)
native Java Agent (dynamic code rewriting, must be low overhead)
Class loader protection
SystemCallFilter (as mentioned by @rmuir)
eBPF (should be on Windows any day now), probably the same category as SystemCallFilter
Please describe the end goal of this project
The
SecurityManageris going to be disabled permanently in JDK-24 (see please https://openjdk.org/projects/jdk/24/). The purpose of this issue is to explore the possible replacements or/and suggest path forward. So far we have identified the following options:So far I am excluding the "radical" solutions:
Supporting References
RFC: https://github.com/opensearch-project/OpenSearch/issues/1687
Issues
Related component
Other