From 160a7eedcadb875ba48a115d671a7dc7754e2659 Mon Sep 17 00:00:00 2001
From: Moritz Mack <mmack@apache.org>
Date: Wed, 19 Feb 2025 15:41:52 +0100
Subject: [PATCH] Add missing entitlements for FIPS

---
 .../initialization/EntitlementInitialization.java           | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java b/libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java
index 0e501b7107a71..32f5ec8f9e4d4 100644
--- a/libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java
+++ b/libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java
@@ -215,8 +215,10 @@ private static PolicyManager createPolicyManager() {
 
         Path trustStorePath = trustStorePath();
         if (trustStorePath != null) {
-            serverScopes.add(
-                new Scope("org.bouncycastle.fips.tls", List.of(new FilesEntitlement(List.of(FileData.ofPath(trustStorePath, READ)))))
+            Collections.addAll(
+                serverScopes,
+                new Scope("org.bouncycastle.fips.tls", List.of(new FilesEntitlement(List.of(FileData.ofPath(trustStorePath, READ))))),
+                new Scope("org.bouncycastle.fips.core", List.of(new ManageThreadsEntitlement()))
             );
         }