Skip to content

Commit 66db6f2

Browse files
Remove unnecessary network entitlements from server (#126799) (#126868)
These entitlements should not be necessary. Server does not directly create any outbound connections, and netty is not a dependency of server so it should not exist within the server policy. Co-authored-by: Elastic Machine <[email protected]>
1 parent cac61e7 commit 66db6f2

File tree

1 file changed

+0
-2
lines changed

1 file changed

+0
-2
lines changed

libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -234,15 +234,13 @@ private static PolicyManager createPolicyManager() {
234234
new ReadStoreAttributesEntitlement(),
235235
new CreateClassLoaderEntitlement(),
236236
new InboundNetworkEntitlement(),
237-
new OutboundNetworkEntitlement(),
238237
new LoadNativeLibrariesEntitlement(),
239238
new ManageThreadsEntitlement(),
240239
new FilesEntitlement(serverModuleFileDatas)
241240
)
242241
),
243242
new Scope("java.desktop", List.of(new LoadNativeLibrariesEntitlement())),
244243
new Scope("org.apache.httpcomponents.httpclient", List.of(new OutboundNetworkEntitlement())),
245-
new Scope("io.netty.transport", List.of(new InboundNetworkEntitlement(), new OutboundNetworkEntitlement())),
246244
new Scope(
247245
"org.apache.lucene.core",
248246
List.of(

0 commit comments

Comments
 (0)