github-mirrors/elasticsearch
1
0
Fork 0
mirror of https://github.com/elastic/elasticsearch.git synced 2025-04-20 21:27:35 -04:00
Code Issues Projects Releases Packages Wiki Activity
elasticsearch/plugins
History
Exact
Lorenzo Dematté 591a08f506
[Entitlements] Validation checks on paths (#126852) (#127055) 
With this PR we restrict the paths we allow access to, forbidding plugins to specify/request entitlements for reading or writing to specific protected directories.

I added this validation to EntitlementInitialization, as I wanted to fail fast and this is the earliest occurrence where we have all we need: PathLookup to resolve relative paths, policies (for plugins, server, agents) and the Paths for the specific directories we want to protect.

Relates to ES-10918
2025-04-19 00:44:49 +10:00
..
analysis-icu [Entitlements] Replace Permissions with Entitlements in InstallPluginAction (#125207) (#126119) 2025-04-02 17:05:18 +02:00
analysis-kuromoji Convert remaining plugin projects to new test clusters framework (#125626) (#125726) 2025-03-27 09:41:37 +11:00
analysis-nori Convert remaining plugin projects to new test clusters framework (#125626) (#125726) 2025-03-27 09:41:37 +11:00
analysis-phonetic Convert remaining plugin projects to new test clusters framework (#125626) (#125726) 2025-03-27 09:41:37 +11:00
analysis-smartcn Convert remaining plugin projects to new test clusters framework (#125626) (#125726) 2025-03-27 09:41:37 +11:00
analysis-stempel Convert remaining plugin projects to new test clusters framework (#125626) (#125726) 2025-03-27 09:41:37 +11:00
analysis-ukrainian Convert remaining plugin projects to new test clusters framework (#125626) (#125726) 2025-03-27 09:41:37 +11:00
discovery-azure-classic Convert remaining plugin projects to new test clusters framework (#125626) (#125726) 2025-03-27 09:41:37 +11:00
discovery-ec2 Silence known entitlement warnings (#124883) (#125106) 2025-03-19 03:03:24 +11:00
discovery-gce Convert remaining plugin projects to new test clusters framework (#125626) (#125726) 2025-03-27 09:41:37 +11:00
examples Format custom authz engine code (#125546) (#125753) 2025-03-27 21:10:59 +11:00
mapper-annotated-text Add ability to set "max_analyzed_offset" implicitly to "index.highlight (#118895) (#121323) 2025-01-31 07:17:16 +11:00
mapper-murmur3 Update Gradle wrapper to 8.12 (#118683) (#119363) 2024-12-31 08:36:31 +01:00
mapper-size Update Gradle wrapper to 8.12 (#118683) (#119363) 2024-12-31 08:36:31 +01:00
repository-hdfs [Entitlements] Validation checks on paths (#126852) (#127055) 2025-04-19 00:44:49 +10:00
store-smb Convert remaining plugin projects to new test clusters framework (#125626) (#125726) 2025-03-27 09:41:37 +11:00
build.gradle Convert remaining plugin projects to new test clusters framework (#125626) (#125726) 2025-03-27 09:41:37 +11:00