lucene/solr/server/etc
Robert Muir 126d6b7767
SOLR-13984: add (experimental, disabled by default) security manager support (#1082)
* SOLR-13984: add (experimental, disabled by default) security manager support.

User can set SOLR_SECURITY_MANAGER_ENABLED=true to enable security manager at runtime.

The current policy file used by tests is moved to solr/server
Additional permissions are granted for the filesystem locations set by bin/solr, and networking everywhere is enabled.

This takes advantage of the fact that permission entries are ignored if properties are not defined:
https://docs.oracle.com/javase/7/docs/technotes/guides/security/PolicyFiles.html#PropertyExp
2019-12-24 06:30:31 -08:00
..
jetty-http.xml SOLR-14091: Removing deprecated configuration of Jetty's soLingerTime option 2019-12-18 17:24:43 -05:00
jetty-https.xml SOLR-14091: Removing deprecated configuration of Jetty's soLingerTime option 2019-12-18 17:24:43 -05:00
jetty-https8.xml SOLR-14091: Removing deprecated configuration of Jetty's soLingerTime option 2019-12-18 17:24:43 -05:00
jetty-requestlog.xml SOLR-14138: enable request log via environ var, remove deprecated jetty class usage, respect SOLR_LOGS_DIR (#1110) 2019-12-23 10:37:31 -05:00
jetty-ssl.xml SOLR-14106: Cleanup Jetty SslContextFactory usage 2019-12-19 23:05:47 -05:00
jetty.xml SOLR-14136: ip whitelist/blacklist via env vars (#1111) 2019-12-23 19:26:11 -05:00
security.policy SOLR-13984: add (experimental, disabled by default) security manager support (#1082) 2019-12-24 06:30:31 -08:00
security.properties SOLR-13984: add (experimental, disabled by default) security manager support (#1082) 2019-12-24 06:30:31 -08:00
webdefault.xml SOLR-13409: Disable HTML directory listings in admin interface to prevent possible security issues 2019-04-17 11:04:13 +02:00