Skip to content

Conversation

@jasontedor
Copy link
Member

When Elasticsearch starts, we go through some initialization before we
install a security manager. Yet, the JVM makes internal policy decisions
on the basis of whether or not a security manager is present. This
commit installs a security manager immediately on startup so that the
JVM always thinks a security manager is present when making such policy
decisions.

When Elasticsearch starts, we go through some initialization before we
install a security manager. Yet, the JVM makes internal policy decisions
on the basis of whether or not a security manager is present. This
commit installs a security manager immediately on startup so that the
JVM always thinks a security manager is present when making such policy
decisions.
Copy link
Member

@rjernst rjernst left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jasontedor
Copy link
Member Author

retest this please

2 similar comments
@jasontedor
Copy link
Member Author

retest this please

@jasontedor
Copy link
Member Author

retest this please

@jasontedor
Copy link
Member Author

This passes for me locally so even though the CI is struggling with what appear to transient issues I'm going to merge.

@jasontedor jasontedor merged commit 4225737 into elastic:master Nov 22, 2016
jasontedor added a commit that referenced this pull request Nov 22, 2016
When Elasticsearch starts, we go through some initialization before we
install a security manager. Yet, the JVM makes internal policy decisions
on the basis of whether or not a security manager is present. This
commit installs a security manager immediately on startup so that the
JVM always thinks a security manager is present when making such policy
decisions.

Relates #21716
jasontedor added a commit that referenced this pull request Nov 22, 2016
When Elasticsearch starts, we go through some initialization before we
install a security manager. Yet, the JVM makes internal policy decisions
on the basis of whether or not a security manager is present. This
commit installs a security manager immediately on startup so that the
JVM always thinks a security manager is present when making such policy
decisions.

Relates #21716
jasontedor added a commit that referenced this pull request Nov 22, 2016
When Elasticsearch starts, we go through some initialization before we
install a security manager. Yet, the JVM makes internal policy decisions
on the basis of whether or not a security manager is present. This
commit installs a security manager immediately on startup so that the
JVM always thinks a security manager is present when making such policy
decisions.

Relates #21716
@jasontedor jasontedor deleted the startup-security-manager branch November 22, 2016 01:52
@jasontedor
Copy link
Member Author

Thanks @rjernst.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants