See my reply on the mailing list. i dont want to overengineer the fix. I have no idea what happens if this sysprop is not set or empty.
On Thu, Feb 26, 2015 at 10:00 AM, Uwe Schindler <[email protected]> wrote: > Why not put: > > permission java.io.FilePermission "${tests.linedocsfile}", "read"; > > This is passed as sysprop down, so it is also available to the policy file. > If it's just the non-absolute path as of now, it also does not really hurt. > > Uwe > > ----- > Uwe Schindler > H.-H.-Meier-Allee 63, D-28213 Bremen > http://www.thetaphi.de > eMail: [email protected] > > >> -----Original Message----- >> From: [email protected] [mailto:[email protected]] >> Sent: Thursday, February 26, 2015 3:47 PM >> To: [email protected] >> Subject: svn commit: r1662465 - >> /lucene/dev/trunk/lucene/tools/junit4/tests.policy >> >> Author: rmuir >> Date: Thu Feb 26 14:46:38 2015 >> New Revision: 1662465 >> >> URL: http://svn.apache.org/r1662465 >> Log: >> best effort support this reading out of sandbox >> >> Modified: >> lucene/dev/trunk/lucene/tools/junit4/tests.policy >> >> Modified: lucene/dev/trunk/lucene/tools/junit4/tests.policy >> URL: >> http://svn.apache.org/viewvc/lucene/dev/trunk/lucene/tools/junit4/tests.p >> olicy?rev=1662465&r1=1662464&r2=1662465&view=diff >> ========================================================== >> ==================== >> --- lucene/dev/trunk/lucene/tools/junit4/tests.policy (original) >> +++ lucene/dev/trunk/lucene/tools/junit4/tests.policy Thu Feb 26 14:46:38 >> 2015 >> @@ -28,6 +28,10 @@ grant { >> // should be enclosed within common.dir, but just in case: >> permission java.io.FilePermission "${junit4.childvm.cwd}", "read"; >> >> + // jenkins wants to read outside its sandbox, to use a special linedocs >> file. >> + // this is best effort and not really supported. >> + permission java.io.FilePermission "/home/jenkins/lucene- >> data/enwiki.random.lines.txt", "read"; >> + >> // write only to sandbox >> permission java.io.FilePermission "${junit4.childvm.cwd}${/}temp", >> "read,write,delete"; >> permission java.io.FilePermission "${junit4.childvm.cwd}${/}temp${/}-", >> "read,write,delete"; > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
