[ 
https://issues.apache.org/jira/browse/LUCENE-6238?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14341864#comment-14341864
 ] 

Dawid Weiss commented on LUCENE-6238:
-------------------------------------

You'd also need to allow:
{code}
"user.timezone", "java.rmi.server.randomIDs" 
{code}
and you'd need to clear these accordingly after each test so that their values 
don't propagate to the next test class. Some "tests of the tests" also set 
system properties that emulate command-line options -- these would either have 
to be removed or be granted globally. I am not convinced this is a better way 
to solve this then the "before-after" invariant that just compares the set of 
properties.

I will release RR in a minute with the patch, if you wish to take it from there 
go ahead.

> minimize tests.policy
> ---------------------
>
>                 Key: LUCENE-6238
>                 URL: https://issues.apache.org/jira/browse/LUCENE-6238
>             Project: Lucene - Core
>          Issue Type: Bug
>            Reporter: Robert Muir
>             Fix For: Trunk, 5.1
>
>         Attachments: LUCENE-6238-mmap.patch, LUCENE-6238.patch, 
> LUCENE-6238.patch, LUCENE-6238.patch
>
>
> This is overly permissive:
> {noformat}
>   // Basic permissions needed for Lucene to work:
>   permission java.util.PropertyPermission "*", "read,write";
>   permission java.lang.reflect.ReflectPermission "*";
>   permission java.lang.RuntimePermission "*";
> {noformat}
> Because of various BS like unsafe-hacks (only mmap seems to do it properly), 
> this means effectively you cannot use lucene with SM today, without allowing 
> SM itself to just be disabled with reflection. 
> This is easy to fix.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org

Reply via email to