[
https://issues.apache.org/jira/browse/SOLR-14020?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16989092#comment-16989092
]
Robert Muir commented on SOLR-14020:
------------------------------------
btw for solr we can clean it up later too, e.g. move to separate JAR with
AllPermission. A better fix would be to remove the hadoop and hadoop hacks.
> move hadoop hacks out of lucene TestSecurityManager into a solr one
> -------------------------------------------------------------------
>
> Key: SOLR-14020
> URL: https://issues.apache.org/jira/browse/SOLR-14020
> Project: Solr
> Issue Type: Improvement
> Security Level: Public(Default Security Level. Issues are Public)
> Reporter: Robert Muir
> Priority: Major
>
> The hadoop hacks here have a heavy toll: because we have to override some
> methods like checkRead, it inserts non-jdk stack frame and breaks a lot of
> JDK doPriv calls. So for example, it means permissions must be added to stuff
> like /dev/random or windows fonts or all kinds of other nonsense.
> This is a price only solr should pay, not lucene. Lets split the stuff out.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]