I found the following issue when trying to work out why OpenJDK would only pass some permission checks to the Policy object and Classpath VMs would pass them all, causing tests using gnu.testlet.TestSecurityManager to fail. It turns out OpenJDK doesn't bother to check the policy if the domain already has AllPermission (as it obviously already has permission regardless of what the policy says). This adds a Mauve test to check for this behaviour. I'm also committing a patch to Classpath to implement this behaviour. 2010-12-24 Andrew John Hughes * gnu/testlet/java/security/ProtectionDomain/Implies.java: Check if Policy.implies(Permission) is called if the protection domain is already known to have AllPermission. -- Andrew :) Free Java Software Engineer Red Hat, Inc. (http://www.redhat.com) Support Free Java! Contribute to GNU Classpath and IcedTea http://www.gnu.org/software/classpath http://icedtea.classpath.org PGP Key: 94EFD9D8 (http://subkeys.pgp.net) Fingerprint = F8EF F1EA 401E 2E60 15FA 7927 142C 2591 94EF D9D8