summaryrefslogtreecommitdiffstats
path: root/sonar-application/src/main/assembly/elasticsearch/modules/lang-expression/plugin-security.policy
diff options
context:
space:
mode:
authorDaniel Schwarz <daniel.schwarz@sonarsource.com>2017-06-29 14:17:10 +0200
committerDaniel Schwarz <bartfastiel@users.noreply.github.com>2017-08-09 15:09:54 +0200
commitfba6ad10cd608de676bf1672db821651f2913c3d (patch)
treeb42046ff2ab43bbf5ab313978f35f50ecbd57681 /sonar-application/src/main/assembly/elasticsearch/modules/lang-expression/plugin-security.policy
parentfde5a3c4fd82ad3f5d6185a2023c1bf16a9a173d (diff)
downloadsonarqube-fba6ad10cd608de676bf1672db821651f2913c3d.tar.gz
sonarqube-fba6ad10cd608de676bf1672db821651f2913c3d.zip
SONAR-8798 SearchServer starts external ES 5 process
This includes to package Elasticsearch 5.0.2 in the SonarQube application This change is required, because Elasticsearch versions later 5 do not provide support for running Elasticsearch “embedded” anymore.
Diffstat (limited to 'sonar-application/src/main/assembly/elasticsearch/modules/lang-expression/plugin-security.policy')
-rw-r--r--sonar-application/src/main/assembly/elasticsearch/modules/lang-expression/plugin-security.policy32
1 files changed, 32 insertions, 0 deletions
diff --git a/sonar-application/src/main/assembly/elasticsearch/modules/lang-expression/plugin-security.policy b/sonar-application/src/main/assembly/elasticsearch/modules/lang-expression/plugin-security.policy
new file mode 100644
index 00000000000..c11af51e464
--- /dev/null
+++ b/sonar-application/src/main/assembly/elasticsearch/modules/lang-expression/plugin-security.policy
@@ -0,0 +1,32 @@
+/*
+ * Licensed to Elasticsearch under one or more contributor
+ * license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright
+ * ownership. Elasticsearch licenses this file to you under
+ * the Apache License, Version 2.0 (the "License"); you may
+ * not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+grant {
+ // needed to generate runtime classes
+ permission java.lang.RuntimePermission "createClassLoader";
+
+ // expression runtime
+ permission org.elasticsearch.script.ClassPermission "java.lang.String";
+ permission org.elasticsearch.script.ClassPermission "org.apache.lucene.expressions.Expression";
+ permission org.elasticsearch.script.ClassPermission "org.apache.lucene.queries.function.FunctionValues";
+ // available functions
+ permission org.elasticsearch.script.ClassPermission "java.lang.Math";
+ permission org.elasticsearch.script.ClassPermission "org.apache.lucene.util.MathUtil";
+ permission org.elasticsearch.script.ClassPermission "org.apache.lucene.util.SloppyMath";
+};