elasticsearch/modules/ingest-attachment
Lorenzo Dematté a4d7297944
Permanently switch from SecurityManager to Entitlements (#124865) (#125117)
The JDK team has completely disabled the Java SecurityManager from Java 24. Elasticsearch has always used the Java SecurityManager as an additional protection mechanism; in order to retain this second line of defense, the Elasticsearch Core/Infra team has been working on the Entitlements project.

Similar to SecurityManager, Entitlements only allow calling specific methods in the JDK when the caller has a matching policy attached. In other words, if some code (in the main Elasticsearch codebase, in a plugin/module, or in a script) attempts to perform a "privileged" operation and it is not entitled to do so, a NotEntitledException will be thrown.

This PR includes the minimal set of changes to always use Entitlements, regardless of system properties or Java version.

Relates to ES-10921
2025-03-18 18:38:45 +02:00
..
licenses Disable ingest-attachment logging (#93878) 2023-02-27 09:53:55 -05:00
src Permanently switch from SecurityManager to Entitlements (#124865) (#125117) 2025-03-18 18:38:45 +02:00
build.gradle Update Gradle wrapper to 8.12 (#118683) 2024-12-30 15:34:24 +01:00