yet more debug

Author: rjernst

libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java

@@ -148,7 +148,6 @@ private static PolicyManager createPolicyManager() {
         Collections.addAll(
             serverModuleFileDatas,
             // Base ES directories
-            FileData.ofPath(bootstrapArgs.tempDir(), READ_WRITE),
             FileData.ofPath(bootstrapArgs.configDir(), READ),
             FileData.ofPath(bootstrapArgs.logsDir(), READ_WRITE),
             FileData.ofRelativePath(Path.of(""), FilesEntitlement.BaseDir.DATA, READ_WRITE),
@@ -214,7 +213,6 @@ private static PolicyManager createPolicyManager() {
                     new FilesEntitlement(
                         List.of(
                             FileData.ofPath(bootstrapArgs.configDir(), READ),
-                            FileData.ofPath(bootstrapArgs.tempDir(), READ),
                             FileData.ofRelativePath(Path.of(""), FilesEntitlement.BaseDir.DATA, READ_WRITE)
                         )
                     )

libs/entitlement/src/main/java/org/elasticsearch/entitlement/runtime/policy/FileAccessTree.java

@@ -50,6 +50,7 @@ private FileAccessTree(FilesEntitlement filesEntitlement, PathLookup pathLookup)
 
         // everything has access to the temp dir
         String tempDir = normalizePath(pathLookup.tempDir());
+        logger.info("Adding temp dir [{}] to file access tree", tempDir);
         readPaths.add(tempDir);
         writePaths.add(tempDir);
 
@@ -90,6 +91,7 @@ private static boolean checkPath(String path, String[] paths) {
         if (ndx < -1) {
             logger.warn("Couldn't find path [{}] in paths:\n{}", path, Arrays.asList(paths));
             String maybeParent = paths[-ndx - 2];
+            logger.warn("Possible parent path: [{}]", maybeParent);
             return path.startsWith(maybeParent) && path.startsWith(FILE_SEPARATOR, maybeParent.length());
         }
         return ndx >= 0;