From 1761e48e534225bec234ea2d0fd223f70c962d5a Mon Sep 17 00:00:00 2001
From: Robert Muir <rmuir@apache.org>
Date: Fri, 13 Dec 2019 03:50:15 -0500
Subject: [PATCH] SOLR-14064: remove some hadoop brain damage from build
 environment

Some permissions and build hacks were made on behalf of hadoop: hacks on
top of hacks. Now that the major problems such as classpath pollution and
hadoop test code are fixed, so we can remove hacks built on top of them.
---
 lucene/common-build.xml               | 1 -
 lucene/tools/junit4/solr-tests.policy | 7 -------
 2 files changed, 8 deletions(-)

diff --git a/lucene/common-build.xml b/lucene/common-build.xml
index 41da3f25952..f82533676a4 100644
--- a/lucene/common-build.xml
+++ b/lucene/common-build.xml
@@ -1174,7 +1174,6 @@
 
             <!-- Restrict access to certain Java features and install security manager: -->
             <sysproperty key="common.dir" file="${common.dir}" />
-            <sysproperty key="ant.library.dir" file="${ant.library.dir}" />
             <sysproperty key="clover.db.dir" file="${clover.db.dir}" />
             <syspropertyset>
                 <propertyref prefix="java.security.manager"/>
diff --git a/lucene/tools/junit4/solr-tests.policy b/lucene/tools/junit4/solr-tests.policy
index 816c7c382e5..faa9ecb2317 100644
--- a/lucene/tools/junit4/solr-tests.policy
+++ b/lucene/tools/junit4/solr-tests.policy
@@ -34,15 +34,8 @@ grant {
   permission java.io.FilePermission "${clover.db.dir}${/}-", "read,write,delete";
   permission java.io.FilePermission "${tests.linedocsfile}", "read";
   // hadoop
-  permission java.io.FilePermission "${ant.library.dir}${/}-", "read";
-  permission java.io.FilePermission "${user.home}${/}.ant${/}lib${/}-", "read";
   permission java.io.FilePermission "${user.home}${/}hadoop-metrics2.properties", "read";
   permission java.io.FilePermission "${user.home}${/}hadoop-metrics2-namenode.properties", "read";
-  // kerberos
-  permission java.io.FilePermission "${user.home}${/}.java.login.config", "read";
-  // SolrTestCaseJ4 explicitly uses these
-  permission java.io.FilePermission "/dev/./urandom", "read";
-  permission java.io.FilePermission "/dev/random", "read";
   // DirectoryFactoryTest messes with these (wtf?)
   permission java.io.FilePermission "/tmp/inst1/conf/solrcore.properties", "read";
   permission java.io.FilePermission "/path/to/myinst/conf/solrcore.properties", "read";