Bug#1034392: Acknowledgement (tomcat9: jstack/jcmd broken for non-root users with tomcat9+jdk11 or greater)

[Per Lundberg]

On 2023-04-19 10:22, Thorsten Glaser wrote:
> On Tue, 18 Apr 2023, Per Lundberg wrote:
> 
>> wanted to share it with you as well. One option would be to include this in
>> Debian's set of local JDK patches
> 
> Shouldn’t this be added to 11 as well? Apparently, both are affected.

Good point. Yes, it should.

> The OpenJDK (except for 8 which the ELTS people and I mostly work on)
> is not maintained by the debian-java people but by Doko.

Hmm... who/what are Doko?

> The usual way to hope for inclusion is to clone the bugreport, assign
> one to src:openjdk-11 and the other to src:openjdk-17, mail the patch
> with a description, add the tag patch and pray.

Thanks for the detailed description! I have done exactly that now. Here 
are the new bugs (added to the Cc line as well):

- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034600
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034601

To those reading this who might not have the context: the patch attached 
to the previous message in this thread fixes an issue with jstack/cmd
and similar tools not being able to connect to processes with Linux
capabilities added to them, when the processes are running as non-root.
This is a regression in the JDK:
https://bugs.openjdk.org/browse/JDK-8226919

The patch has been successfully tested on JDK 17 and works fine,
according to our testing. No guarantees are given as to whether it works
on JDK 11, but as long as it applies cleanly, it "should" be fine.

Best regards,
Per