|
24 | 24 | import org.elasticsearch.entitlement.runtime.policy.entitlements.CreateClassLoaderEntitlement; |
25 | 25 | import org.elasticsearch.entitlement.runtime.policy.entitlements.Entitlement; |
26 | 26 | import org.elasticsearch.entitlement.runtime.policy.entitlements.ExitVMEntitlement; |
| 27 | +import org.elasticsearch.entitlement.runtime.policy.entitlements.FilesEntitlement; |
27 | 28 | import org.elasticsearch.entitlement.runtime.policy.entitlements.InboundNetworkEntitlement; |
28 | 29 | import org.elasticsearch.entitlement.runtime.policy.entitlements.LoadNativeLibrariesEntitlement; |
29 | 30 | import org.elasticsearch.entitlement.runtime.policy.entitlements.OutboundNetworkEntitlement; |
|
43 | 44 | import java.nio.file.attribute.FileAttribute; |
44 | 45 | import java.nio.file.spi.FileSystemProvider; |
45 | 46 | import java.util.ArrayList; |
| 47 | +import java.util.Arrays; |
46 | 48 | import java.util.HashMap; |
47 | 49 | import java.util.List; |
48 | 50 | import java.util.Map; |
|
51 | 53 | import java.util.stream.Collectors; |
52 | 54 | import java.util.stream.Stream; |
53 | 55 |
|
| 56 | +import static org.elasticsearch.entitlement.runtime.policy.entitlements.FilesEntitlement.Mode.READ_WRITE; |
| 57 | + |
54 | 58 | /** |
55 | 59 | * Called by the agent during {@code agentmain} to configure the entitlement system, |
56 | 60 | * instantiate and configure an {@link EntitlementChecker}, |
@@ -128,7 +132,10 @@ private static PolicyManager createPolicyManager() { |
128 | 132 | new CreateClassLoaderEntitlement(), |
129 | 133 | new InboundNetworkEntitlement(), |
130 | 134 | new OutboundNetworkEntitlement(), |
131 | | - new LoadNativeLibrariesEntitlement() |
| 135 | + new LoadNativeLibrariesEntitlement(), |
| 136 | + new FilesEntitlement( |
| 137 | + List.of(new FilesEntitlement.FileData(EntitlementBootstrap.bootstrapArgs().tempDir().toString(), READ_WRITE)) |
| 138 | + ) |
132 | 139 | ) |
133 | 140 | ), |
134 | 141 | new Scope("org.apache.httpcomponents.httpclient", List.of(new OutboundNetworkEntitlement())), |
|
0 commit comments