Skip to content

Commit edb8047

Browse files
committed
Add entitlement for reading system files
1 parent a404b17 commit edb8047

File tree

1 file changed

+10
-6
lines changed

1 file changed

+10
-6
lines changed

libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java

Lines changed: 10 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -150,13 +150,17 @@ private static PolicyManager createPolicyManager() {
150150
new LoadNativeLibrariesEntitlement(),
151151
new ManageThreadsEntitlement(),
152152
new FilesEntitlement(
153-
Stream.of(
154-
Stream.of(new FilesEntitlement.FileData(tempDir.toString(), READ_WRITE)),
155-
Stream.of(new FilesEntitlement.FileData(configDir.toString(), READ_WRITE)),
156-
Stream.of(new FilesEntitlement.FileData(logsDir.toString(), READ_WRITE)),
157-
Stream.of(new FilesEntitlement.FileData("/etc/os-release", READ)), // for OsProbe
153+
Stream.concat(
154+
Stream.of(
155+
new FilesEntitlement.FileData(tempDir.toString(), READ_WRITE),
156+
new FilesEntitlement.FileData(configDir.toString(), READ_WRITE),
157+
new FilesEntitlement.FileData(logsDir.toString(), READ_WRITE),
158+
new FilesEntitlement.FileData("/etc/os-release", READ), // for OsProbe
159+
new FilesEntitlement.FileData("/usr/lib/os-release", READ), // for OsProbe
160+
new FilesEntitlement.FileData("/proc/sys/vm/max_map_count", READ)
161+
),
158162
Arrays.stream(dataDirs).map(d -> new FileData(d.toString(), READ_WRITE))
159-
).flatMap(Function.identity()).toList()
163+
).toList()
160164
)
161165
)
162166
),

0 commit comments

Comments
 (0)