Consider to Remove Java means JRE too?

Questions about applications and software
Forum rules
Before you post read how to get help. Topics in this forum are automatically closed 6 months after creation.
Locked
User avatar
NoHo Hank
Level 5
Level 5
Posts: 514
Joined: Wed Jun 29, 2022 6:03 am

Consider to Remove Java means JRE too?

Post by NoHo Hank »

We like to use Cruiser, a map viewer. It needs a working Java Runtime Environment installation.
https://wiki.openstreetmap.org/wiki/Cruiser#Linux

Now we've read
Consider to Remove Java (openJDK)
9. Java (both Oracle Java and openJDK) is frequently under attack.
https://easylinuxtipsproject.blogspot.c ... y.html#ID9

Is this the same thing as JRE that comes with LM20.3?
Last edited by LockBot on Sat Feb 18, 2023 11:00 pm, edited 1 time in total.
Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed.
Demand technology that serves us - https://peoplevsbig.tech/
None of Your Business https://noyb.eu/en
User avatar
spamegg
Level 13
Level 13
Posts: 4782
Joined: Mon Oct 28, 2019 2:34 am
Contact:

Re: Consider to Remove Java means JRE too?

Post by spamegg »

Yes it is. OpenJDK is the name of it, but what comes pre-installed is actually the OpenJDK JRE (runtime environment).

JRE is what you need for running Java programs.
JDK (development kit) is what you need for developing Java programs (libraries, debugger, etc.)

OpenJDK has "JDK" in its name but that's just a confusing name choice. Mint comes with a JRE installed only.

There are other software vendors that make JREs and JDKs, like Oracle.
User avatar
NoHo Hank
Level 5
Level 5
Posts: 514
Joined: Wed Jun 29, 2022 6:03 am

Re: Consider to Remove Java means JRE too?

Post by NoHo Hank »

Is there a (sandbox) way to securely run JRE so we can continue using Cruiser?
Demand technology that serves us - https://peoplevsbig.tech/
None of Your Business https://noyb.eu/en
dave0808
Level 5
Level 5
Posts: 961
Joined: Sat May 16, 2015 1:02 pm

Re: Consider to Remove Java means JRE too?

Post by dave0808 »

This misconception that Java is bad by default is utter nonsense. Running Java is no different to running any other interpreter, for example, Python. When you run a Java application, the JRE process has no extra privileges with which to attack your system. If you trust the developer / publisher, then you are no worse off than running a python script.

This kind of thinking may have originated from the days of Java Applets, which were small Java programs embedded into web pages. These ran in the browser in a sandbox. Inevitably, there were issues with the sandboxing and some clever and devious people were able to break out of it, in some way.

For this reason, it is worth disabling the use of Java within LibreOffice, under the "Advanced" options. There might be an edge case out there, but I see no reason to run any Java program within LibreOffice, whether it is sandboxed or not. An extension of that would therefore be for users to remove the JRE if they're not using Java at all. Saves updating something that's never used.

The other common misconception is that Java and Javascript are related. They are not. However, the latter is prevalent in today's web sites and it does get its share of issues in various libraries that can be very widely used. Javascript is also the part of the tool chain for several "local web apps", e.g. anything based on the Electon framework. For this reason, popular javascript libraries are often examined in fine detail for any flaws, as well as suffering attempts to have malicious code commits.

Having said that, it is possible and indeed recommended to run Java (and any other program) within a Firejail sandbox in order to keep the Java application away from your files. There are plenty of default Firejail profiles for Java applications that can be used as a template for any other application.
bendipa
Level 5
Level 5
Posts: 576
Joined: Sat Jan 04, 2020 8:02 pm
Location: NW London. UK

Re: Consider to Remove Java means JRE too?

Post by bendipa »

For this reason, it is worth disabling the use of Java within LibreOffice, under the "Advanced" options. There might be an edge case out there, but I see no reason to run any Java program within LibreOffice, whether it is sandboxed or not.

LibreOffice Base, which I use a fair bit won't run without JRE. Same for certain applications within LibreOffice Calc.
Computer: Dell Vostro 470
Systems: Linux Mint 21.2 Xfce (Victoria), Manjaro 23.1 Xfce (Vulcan), Windows 10 (22H2) Pro.
Cosmo.
Level 24
Level 24
Posts: 22968
Joined: Sat Dec 06, 2014 7:34 am

Re: Consider to Remove Java means JRE too?

Post by Cosmo. »

Also the wizards in LO do not run without Java.

There is really no need to cripple LO. The bad wording for Java comes from the old Java browser plugins, but that is another thing and since several years dead.
dave0808
Level 5
Level 5
Posts: 961
Joined: Sat May 16, 2015 1:02 pm

Re: Consider to Remove Java means JRE too?

Post by dave0808 »

Interesting.

I don't use Base, mostly Writer and Calc and not any of the wizards, so I'd never hit any problems. LO's help on the matter is uninformative :lol:
Locked

Return to “Software & Applications”