Fixes #15

- Fix a typo in the security policy file - Reference the security policy file for tests Signed-off-by: Scott Stults <[email protected]>
opensearch-project · Sep 7, 2024 · 4308757 · 4308757
1 parent c0cc15a
commit 4308757
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 6 deletions.
diff --git a/build.gradle b/build.gradle
@@ -144,8 +144,13 @@ githubRelease.doFirst {
   }
 }
 
-tasks.withType(Test) { task ->
-  if (JavaVersion.current().compareTo(JavaVersion.VERSION_17) > 0) {
-    task.jvmArgs += ["-Djava.security.manager=allow"]
-  }
+tasks.withType(Test).configureEach { task ->
+    if (JavaVersion.current().compareTo(JavaVersion.VERSION_17) > 0) {
+        def policyFile = file("${projectDir}/src/main/plugin-metadata/plugin-security.policy").absolutePath
+        task.jvmArgs += [
+            "--add-opens", "java.base/java.lang=ALL-UNNAMED",
+            "-Djava.security.manager",
+            "-Djava.security.policy=" + policyFile
+        ]
+    }
 }
diff --git a/src/main/plugin-metadata/plugin-security.policy b/src/main/plugin-metadata/plugin-security.policy
@@ -20,11 +20,11 @@
 grant {
   // needed to generate runtime classes
   permission java.lang.RuntimePermission "createClassLoader";
-  
+
   // expression runtime
   permission org.opensearch.script.ClassPermission "java.lang.String";
   permission org.opensearch.script.ClassPermission "org.apache.lucene.expressions.Expression";
-  permission org.opensearch.script.ClassPermission "org.apache.lucene.expressions.js.ExpressionMath"
+  permission org.opensearch.script.ClassPermission "org.apache.lucene.expressions.js.ExpressionMath";
   permission org.opensearch.script.ClassPermission "org.apache.lucene.search.DoubleValues";
   // available functions
   permission org.opensearch.script.ClassPermission "java.lang.Math";