Browse Source

Remove stale permissions from untrusted policy (#44783)

We have some old permissions lying around, granted to untrusted code
from the days of yore when we supported Groovy and Javascript
scripting. This commit removes these stale permissions.
Jason Tedor 6 years ago
parent
commit
ff6e55b860

+ 0 - 10
server/src/main/resources/org/elasticsearch/bootstrap/untrusted.policy

@@ -22,16 +22,6 @@
  * This is what is needed for basic functionality to work.
  */
 grant {
-  
-  // groovy IndyInterface bootstrap requires this property for indy logging
-  permission java.util.PropertyPermission "groovy.indy.logging", "read";
-  // groovy requires this to enable workaround for certain JVMs (https://github.com/apache/groovy/pull/137)
-  permission java.util.PropertyPermission "java.vm.name", "read";
-  permission java.util.PropertyPermission "groovy.use.classvalue", "read";
-  
-  // needed by Rhino engine exception handling
-  permission java.util.PropertyPermission "rhino.stack.style", "read";
-
   // needed IndyInterface selectMethod (setCallSiteTarget)
   // TODO: clean this up / only give it to engines that really must have it
   permission java.lang.RuntimePermission "getClassLoader";