Skip to content

Conversation

@n1v0lg
Copy link
Contributor

@n1v0lg n1v0lg commented Feb 27, 2025

Backports the following commits to 9.0:

SSL file utils currently only handle security manager access control
exceptions around file read checks. This PR extends these to support
entitlement checks as well. 

There is no easy way to unit test this since we can't run unit tests
with entitlements enabled (for now). The PR includes a REST test
instead. 

Relates: elastic#121960
@n1v0lg n1v0lg added :Core/Infra/Entitlements Entitlements infrastructure :Security/TLS SSL/TLS, Certificates >non-issue auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport Team:Core/Infra Meta label for core/infra team Team:Security Meta label for security team labels Feb 27, 2025
@elasticsearchmachine elasticsearchmachine merged commit 7e3d85a into elastic:9.0 Feb 27, 2025
21 checks passed
@n1v0lg n1v0lg deleted the backport/9.0/pr-123491 branch February 27, 2025 14:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport :Core/Infra/Entitlements Entitlements infrastructure >non-issue :Security/TLS SSL/TLS, Certificates Team:Core/Infra Meta label for core/infra team Team:Security Meta label for security team v9.0.1

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants