[ https://issues.apache.org/jira/browse/SOLR-7106?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14321726#comment-14321726 ]
Noble Paul commented on SOLR-7106: ---------------------------------- Actually the dynamically loaded executables have no permissions .But it may have transitive permissions if we have code in Solr which exposes File read/write operations . We need to whitelist the packages that could be accessed by such plugins > Disable dynamic loading by default > ---------------------------------- > > Key: SOLR-7106 > URL: https://issues.apache.org/jira/browse/SOLR-7106 > Project: Solr > Issue Type: Task > Reporter: Noble Paul > Assignee: Noble Paul > Priority: Blocker > Fix For: 5.0 > > Attachments: SOLR-7106.patch, SOLR-7106.patch > > > Dynamic loading of jars is enabled by default SOLR-6801. It is a security > vulnerability and we should set it to be disabled by default -- This message was sent by Atlassian JIRA (v6.3.4#6332) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org