Try break some policy

Author: ldematte

modules/apm/src/main/plugin-metadata/plugin-security.policy

@@ -19,7 +19,7 @@ grant {
 grant codeBase "${codebase.elastic-apm-agent}" {
     permission java.lang.RuntimePermission "accessDeclaredMembers";
     permission java.lang.RuntimePermission "setContextClassLoader";
-    permission java.lang.RuntimePermission "setFactory";
+    //permission java.lang.RuntimePermission "setFactory";
     permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
     permission java.net.SocketPermission "*", "connect,resolve";
     // profiling function in APM agent

modules/repository-gcs/src/main/plugin-metadata/plugin-security.policy

@@ -13,7 +13,7 @@ grant {
   // required by: com.google.api.client.json.GenericJson#<init>
   permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
   // required to add google certs to the gcs client trustore
-  permission java.lang.RuntimePermission "setFactory";
+  // permission java.lang.RuntimePermission "setFactory";
 
   // gcs client opens socket connections for to access repository
   permission java.net.SocketPermission "*", "connect";

x-pack/plugin/inference/src/main/plugin-metadata/plugin-security.policy

@@ -16,7 +16,7 @@ grant {
   permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
 
   // required to add google certs to the gcs client trustore
-  permission java.lang.RuntimePermission "setFactory";
+  //permission java.lang.RuntimePermission "setFactory";
 
   // gcs client opens socket connections for to access repository
   // also, AWS Bedrock client opens socket connections and needs resolve for to access to resources

x-pack/plugin/security/src/main/plugin-metadata/plugin-security.policy

@@ -1,5 +1,5 @@
 grant {
-  permission java.lang.RuntimePermission "setFactory";
+  //permission java.lang.RuntimePermission "setFactory";
 
   // secure the users file from other things (current and legacy locations)
   permission org.elasticsearch.SecuredConfigFileAccessPermission "users";

x-pack/plugin/sql/qa/jdbc/security/src/test/resources/plugin-security.policy

@@ -5,5 +5,5 @@ grant {
 
   //// Required by ssl subproject:
   // Required for the net client to setup ssl rather than use global ssl.
-  permission java.lang.RuntimePermission "setFactory";
+  //permission java.lang.RuntimePermission "setFactory";
 };

x-pack/plugin/sql/qa/server/security/src/test/resources/plugin-security.policy

@@ -5,5 +5,5 @@ grant {
 
   //// Required by ssl subproject:
   // Required for the net client to setup ssl rather than use global ssl.
-  permission java.lang.RuntimePermission "setFactory";
+  //permission java.lang.RuntimePermission "setFactory";
 };

x-pack/plugin/watcher/src/main/plugin-metadata/plugin-security.policy

@@ -1,6 +1,6 @@
 grant {
   // required to configure the custom mailcap for watcher
-  permission java.lang.RuntimePermission "setFactory";
+  // permission java.lang.RuntimePermission "setFactory";
 
   // needed when sending emails for javax.activation
   // otherwise a classnotfound exception is thrown due to trying