Skip to content

WIP Try break some policy #118422

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 3 commits into
base: main
Choose a base branch
from
Draft

WIP Try break some policy #118422

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
a6d862b
Try break some policy
ldematte Dec 11, 2024
01e57ad
Try break some policy
ldematte Dec 11, 2024
b0f8496
Try break some policy
ldematte Dec 11, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion modules/apm/src/main/plugin-metadata/plugin-security.policy
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ grant {
grant codeBase "${codebase.elastic-apm-agent}" {
permission java.lang.RuntimePermission "accessDeclaredMembers";
permission java.lang.RuntimePermission "setContextClassLoader";
permission java.lang.RuntimePermission "setFactory";
//permission java.lang.RuntimePermission "setFactory";
permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
permission java.net.SocketPermission "*", "connect,resolve";
// profiling function in APM agent
Expand Down
2 changes: 1 addition & 1 deletion modules/repository-gcs/src/main/plugin-metadata/plugin-security.policy
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@ grant {
// required by: com.google.api.client.json.GenericJson#<init>
permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
// required to add google certs to the gcs client trustore
permission java.lang.RuntimePermission "setFactory";
// permission java.lang.RuntimePermission "setFactory";

// gcs client opens socket connections for to access repository
permission java.net.SocketPermission "*", "connect";
Expand Down
2 changes: 1 addition & 1 deletion plugins/discovery-gce/src/main/plugin-metadata/plugin-security.policy
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
grant {
// needed because of problems in gce
permission java.lang.RuntimePermission "accessDeclaredMembers";
permission java.lang.RuntimePermission "setFactory";
//permission java.lang.RuntimePermission "setFactory";
permission java.lang.reflect.ReflectPermission "suppressAccessChecks";

// gce client opens socket connections for discovery
Expand Down
2 changes: 1 addition & 1 deletion x-pack/plugin/core/src/main/plugin-metadata/plugin-security.policy
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
grant {
// CommandLineHttpClient
permission java.lang.RuntimePermission "setFactory";
// permission java.lang.RuntimePermission "setFactory";
// bouncy castle
permission java.security.SecurityPermission "putProviderProperty.BC";

Expand Down
2 changes: 1 addition & 1 deletion x-pack/plugin/identity-provider/src/main/plugin-metadata/plugin-security.policy
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
grant {
permission java.lang.RuntimePermission "setFactory";
//permission java.lang.RuntimePermission "setFactory";

// ApacheXMLSecurityInitializer
permission java.util.PropertyPermission "org.apache.xml.security.ignoreLineBreaks", "read,write";
Expand Down
2 changes: 1 addition & 1 deletion x-pack/plugin/inference/src/main/plugin-metadata/plugin-security.policy
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ grant {
permission java.lang.reflect.ReflectPermission "suppressAccessChecks";

// required to add google certs to the gcs client trustore
permission java.lang.RuntimePermission "setFactory";
//permission java.lang.RuntimePermission "setFactory";

// gcs client opens socket connections for to access repository
// also, AWS Bedrock client opens socket connections and needs resolve for to access to resources
Expand Down
2 changes: 1 addition & 1 deletion x-pack/plugin/monitoring/src/main/plugin-metadata/plugin-security.policy
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ grant {
permission java.util.PropertyPermission "*", "read,write";

// required to configure the custom mailcap for watcher
permission java.lang.RuntimePermission "setFactory";
//permission java.lang.RuntimePermission "setFactory";

// needed when sending emails for javax.activation
// otherwise a classnotfound exception is thrown due to trying
Expand Down
2 changes: 1 addition & 1 deletion x-pack/plugin/security/src/main/plugin-metadata/plugin-security.policy
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
grant {
permission java.lang.RuntimePermission "setFactory";
//permission java.lang.RuntimePermission "setFactory";

// secure the users file from other things (current and legacy locations)
permission org.elasticsearch.SecuredConfigFileAccessPermission "users";
Expand Down
2 changes: 1 addition & 1 deletion x-pack/plugin/sql/qa/jdbc/security/src/test/resources/plugin-security.policy
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,5 +5,5 @@ grant {

//// Required by ssl subproject:
// Required for the net client to setup ssl rather than use global ssl.
permission java.lang.RuntimePermission "setFactory";
//permission java.lang.RuntimePermission "setFactory";
};
2 changes: 1 addition & 1 deletion x-pack/plugin/sql/qa/server/security/src/test/resources/plugin-security.policy
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,5 +5,5 @@ grant {

//// Required by ssl subproject:
// Required for the net client to setup ssl rather than use global ssl.
permission java.lang.RuntimePermission "setFactory";
//permission java.lang.RuntimePermission "setFactory";
};
2 changes: 1 addition & 1 deletion x-pack/plugin/watcher/src/main/plugin-metadata/plugin-security.policy
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
grant {
// required to configure the custom mailcap for watcher
permission java.lang.RuntimePermission "setFactory";
// permission java.lang.RuntimePermission "setFactory";

// needed when sending emails for javax.activation
// otherwise a classnotfound exception is thrown due to trying
Expand Down