7145239: Finetune package definition restriction
Reviewed-by: hawtin
diff --git a/src/share/lib/security/java.security b/src/share/lib/security/java.security
index a89d40e..1b55180 100644
--- a/src/share/lib/security/java.security
+++ b/src/share/lib/security/java.security
@@ -132,10 +132,10 @@
 # corresponding RuntimePermission ("defineClassInPackage."+package) has
 # been granted.
 #
-# by default, no packages are restricted for definition, and none of
-# the class loaders supplied with the JDK call checkPackageDefinition.
+# by default, none of the class loaders supplied with the JDK call
+# checkPackageDefinition.
 #
-#package.definition=
+package.definition=sun.,com.sun.xml.internal.ws.,com.sun.xml.internal.bind.,com.sun.imageio.
 
 #
 # Determines whether this properties file can be appended to