mirror of
https://github.com/elastic/elasticsearch.git
synced 2025-06-28 17:34:17 -04:00
SSL file utils currently only handle security manager access control exceptions around file read checks. This PR extends these to support entitlement checks as well. There is no easy way to unit test this since we can't run unit tests with entitlements enabled (for now). The PR includes a REST test instead. Relates: https://github.com/elastic/elasticsearch/issues/121960
33 lines
1.1 KiB
Groovy
33 lines
1.1 KiB
Groovy
/*
|
|
* Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
|
|
* or more contributor license agreements. Licensed under the "Elastic License
|
|
* 2.0", the "GNU Affero General Public License v3.0 only", and the "Server Side
|
|
* Public License v 1"; you may not use this file except in compliance with, at
|
|
* your election, the "Elastic License 2.0", the "GNU Affero General Public
|
|
* License v3.0 only", or the "Server Side Public License, v 1".
|
|
*/
|
|
apply plugin: "elasticsearch.publish"
|
|
|
|
dependencies {
|
|
api project(':libs:core')
|
|
api project(':libs:entitlement')
|
|
|
|
testImplementation(project(":test:framework")) {
|
|
exclude group: 'org.elasticsearch', module: 'ssl-config'
|
|
}
|
|
|
|
testImplementation "com.carrotsearch.randomizedtesting:randomizedtesting-runner:${versions.randomizedrunner}"
|
|
testImplementation "junit:junit:${versions.junit}"
|
|
testImplementation "org.hamcrest:hamcrest:${versions.hamcrest}"
|
|
}
|
|
|
|
tasks.named('forbiddenApisMain').configure {
|
|
replaceSignatureFiles 'jdk-signatures'
|
|
}
|
|
|
|
tasks.named("forbiddenPatterns").configure {
|
|
exclude '**/*.key'
|
|
exclude '**/*.pem'
|
|
exclude '**/*.p12'
|
|
exclude '**/*.jks'
|
|
}
|