Hello everyone,

Java 24 is removing the Security Manager. This is pertinent to us, since we
have the SecurityManager enabled by default.

Because of this we need to disable the Security Manager when running Java
24+.

We also probably want to remove it entirely for Solr 10.

We can do this, but we should really make sure that we still have the same
security guarantees built-in to Solr. We have this already with
allowedPaths, but we should audit the codebase to make sure this assumption
of security is correct.

The ticket that is managing this is
https://issues.apache.org/jira/browse/SOLR-17641

- Houston

Reply via email to