Skip to content

Commit 05e218e

Browse files
committed
Add missing server entitlement
1 parent 79eab27 commit 05e218e

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@
2424
import org.elasticsearch.entitlement.runtime.policy.entitlements.CreateClassLoaderEntitlement;
2525
import org.elasticsearch.entitlement.runtime.policy.entitlements.Entitlement;
2626
import org.elasticsearch.entitlement.runtime.policy.entitlements.ExitVMEntitlement;
27+
import org.elasticsearch.entitlement.runtime.policy.entitlements.FilesEntitlement;
2728
import org.elasticsearch.entitlement.runtime.policy.entitlements.InboundNetworkEntitlement;
2829
import org.elasticsearch.entitlement.runtime.policy.entitlements.LoadNativeLibrariesEntitlement;
2930
import org.elasticsearch.entitlement.runtime.policy.entitlements.OutboundNetworkEntitlement;
@@ -43,6 +44,7 @@
4344
import java.nio.file.attribute.FileAttribute;
4445
import java.nio.file.spi.FileSystemProvider;
4546
import java.util.ArrayList;
47+
import java.util.Arrays;
4648
import java.util.HashMap;
4749
import java.util.List;
4850
import java.util.Map;
@@ -51,6 +53,8 @@
5153
import java.util.stream.Collectors;
5254
import java.util.stream.Stream;
5355

56+
import static org.elasticsearch.entitlement.runtime.policy.entitlements.FilesEntitlement.Mode.READ_WRITE;
57+
5458
/**
5559
* Called by the agent during {@code agentmain} to configure the entitlement system,
5660
* instantiate and configure an {@link EntitlementChecker},
@@ -128,7 +132,10 @@ private static PolicyManager createPolicyManager() {
128132
new CreateClassLoaderEntitlement(),
129133
new InboundNetworkEntitlement(),
130134
new OutboundNetworkEntitlement(),
131-
new LoadNativeLibrariesEntitlement()
135+
new LoadNativeLibrariesEntitlement(),
136+
new FilesEntitlement(
137+
List.of(new FilesEntitlement.FileData(EntitlementBootstrap.bootstrapArgs().tempDir().toString(), READ_WRITE))
138+
)
132139
)
133140
),
134141
new Scope("org.apache.httpcomponents.httpclient", List.of(new OutboundNetworkEntitlement())),

0 commit comments

Comments
 (0)