Why not put:
permission java.io.FilePermission "${tests.linedocsfile}", "read";
This is passed as sysprop down, so it is also available to the policy file. If
it's just the non-absolute path as of now, it also does not really hurt.
Uwe
-----
Uwe Schindler
H.-H.-Meier-Allee 63, D-28213 Bremen
http://www.thetaphi.de
eMail: [email protected]
> -----Original Message-----
> From: [email protected] [mailto:[email protected]]
> Sent: Thursday, February 26, 2015 3:47 PM
> To: [email protected]
> Subject: svn commit: r1662465 -
> /lucene/dev/trunk/lucene/tools/junit4/tests.policy
>
> Author: rmuir
> Date: Thu Feb 26 14:46:38 2015
> New Revision: 1662465
>
> URL: http://svn.apache.org/r1662465
> Log:
> best effort support this reading out of sandbox
>
> Modified:
> lucene/dev/trunk/lucene/tools/junit4/tests.policy
>
> Modified: lucene/dev/trunk/lucene/tools/junit4/tests.policy
> URL:
> http://svn.apache.org/viewvc/lucene/dev/trunk/lucene/tools/junit4/tests.p
> olicy?rev=1662465&r1=1662464&r2=1662465&view=diff
> ==========================================================
> ====================
> --- lucene/dev/trunk/lucene/tools/junit4/tests.policy (original)
> +++ lucene/dev/trunk/lucene/tools/junit4/tests.policy Thu Feb 26 14:46:38
> 2015
> @@ -28,6 +28,10 @@ grant {
> // should be enclosed within common.dir, but just in case:
> permission java.io.FilePermission "${junit4.childvm.cwd}", "read";
>
> + // jenkins wants to read outside its sandbox, to use a special linedocs
> file.
> + // this is best effort and not really supported.
> + permission java.io.FilePermission "/home/jenkins/lucene-
> data/enwiki.random.lines.txt", "read";
> +
> // write only to sandbox
> permission java.io.FilePermission "${junit4.childvm.cwd}${/}temp",
> "read,write,delete";
> permission java.io.FilePermission "${junit4.childvm.cwd}${/}temp${/}-",
> "read,write,delete";
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
