Skip to content

Commit 4c77d5e

Browse files
committed
Remove stale permissions from untrusted policy (elastic#44783)
We have some old permissions lying around, granted to untrusted code from the days of yore when we supported Groovy and Javascript scripting. This commit removes these stale permissions.
1 parent 659ebf6 commit 4c77d5e

File tree

1 file changed

+0
-10
lines changed

1 file changed

+0
-10
lines changed

server/src/main/resources/org/elasticsearch/bootstrap/untrusted.policy

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -22,16 +22,6 @@
2222
* This is what is needed for basic functionality to work.
2323
*/
2424
grant {
25-
26-
// groovy IndyInterface bootstrap requires this property for indy logging
27-
permission java.util.PropertyPermission "groovy.indy.logging", "read";
28-
// groovy requires this to enable workaround for certain JVMs (https://github.com/apache/groovy/pull/137)
29-
permission java.util.PropertyPermission "java.vm.name", "read";
30-
permission java.util.PropertyPermission "groovy.use.classvalue", "read";
31-
32-
// needed by Rhino engine exception handling
33-
permission java.util.PropertyPermission "rhino.stack.style", "read";
34-
3525
// needed IndyInterface selectMethod (setCallSiteTarget)
3626
// TODO: clean this up / only give it to engines that really must have it
3727
permission java.lang.RuntimePermission "getClassLoader";

0 commit comments

Comments
 (0)