Skip to content

Commit 1b799ba

Browse files
authored
Remove unnecessary network entitlements from server (#126799) (#126869)
These entitlements should not be necessary. Server does not directly create any outbound connections, and netty is not a dependency of server so it should not exist within the server policy.
1 parent cc2f101 commit 1b799ba

File tree

1 file changed

+0
-2
lines changed

1 file changed

+0
-2
lines changed

libs/entitlement/src/main/java/org/elasticsearch/entitlement/initialization/EntitlementInitialization.java

-2
Original file line numberDiff line numberDiff line change
@@ -231,15 +231,13 @@ private static PolicyManager createPolicyManager() {
231231
new ReadStoreAttributesEntitlement(),
232232
new CreateClassLoaderEntitlement(),
233233
new InboundNetworkEntitlement(),
234-
new OutboundNetworkEntitlement(),
235234
new LoadNativeLibrariesEntitlement(),
236235
new ManageThreadsEntitlement(),
237236
new FilesEntitlement(serverModuleFileDatas)
238237
)
239238
),
240239
new Scope("java.desktop", List.of(new LoadNativeLibrariesEntitlement())),
241240
new Scope("org.apache.httpcomponents.httpclient", List.of(new OutboundNetworkEntitlement())),
242-
new Scope("io.netty.transport", List.of(new InboundNetworkEntitlement(), new OutboundNetworkEntitlement())),
243241
new Scope(
244242
"org.apache.lucene.core",
245243
List.of(

0 commit comments

Comments
 (0)