mirror of
https://github.com/elastic/elasticsearch.git
synced 2025-04-24 15:17:30 -04:00
23a47cebf1
Security manager policies within plugins currently can ask to grant any permission (though we block some within the security manager itself at runtime). Yet most of these permissions should never be necessary, and some we would actively not want any plugins to be allowed to use. This commit adds validation of plugins' policy files to restrict the permissions allowed to be granted to a subset that is reasonable for plugins to need. The allowed permissions are not ideal (still containing things like suppressAccessChecks), but it is a step forward in defining a stricter model for plugins that reduces the surface area of potential abuse. |
||
|---|---|---|
| .. | ||
| archives | ||
| bwc | ||
| docker | ||
| licenses | ||
| packages | ||
| src | ||
| tools | ||
| build.gradle | ||