|
| 1 | +/* |
| 2 | + * SPDX-License-Identifier: Apache-2.0 |
| 3 | + * |
| 4 | + * The OpenSearch Contributors require contributions made to |
| 5 | + * this file be licensed under the Apache-2.0 license or a |
| 6 | + * compatible open source license. |
| 7 | + */ |
| 8 | + |
| 9 | +grant codeBase "${codebase.grpc-netty-shaded}" { |
| 10 | + permission java.net.SocketPermission "*", "accept,connect,listen,resolve"; |
| 11 | + permission java.lang.RuntimePermission "*", "setContextClassLoader"; |
| 12 | +}; |
| 13 | + |
| 14 | +grant codeBase "${codebase.grpc-core}" { |
| 15 | + permission java.net.SocketPermission "*", "accept,connect,listen,resolve"; |
| 16 | + permission java.lang.RuntimePermission "*", "setContextClassLoader"; |
| 17 | +}; |
| 18 | + |
| 19 | +grant { |
| 20 | + // arrow flight service permissions |
| 21 | + permission java.util.PropertyPermission "arrow.allocation.manager.type", "write"; |
| 22 | + permission java.util.PropertyPermission "arrow.enable_null_check_for_get", "write"; |
| 23 | + permission java.util.PropertyPermission "arrow.enable_unsafe_memory_access", "write"; |
| 24 | + permission java.util.PropertyPermission "arrow.memory.debug.allocator", "write"; |
| 25 | + |
| 26 | + permission java.util.PropertyPermission "io.netty.tryReflectionSetAccessible", "write"; |
| 27 | + permission java.util.PropertyPermission "io.netty.allocator.numDirectArenas", "write"; |
| 28 | + permission java.util.PropertyPermission "io.netty.noUnsafe", "write"; |
| 29 | + permission java.util.PropertyPermission "io.netty.tryUnsafe", "write"; |
| 30 | + |
| 31 | + // Needed for netty based arrow flight server for netty configs related to buffer allocator |
| 32 | + permission java.security.AllPermission "modifyThreadGroup"; |
| 33 | + permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; |
| 34 | + permission java.util.PropertyPermission "arrow.allocation.manager.type", "write"; |
| 35 | +}; |
0 commit comments