[ 
https://issues.apache.org/jira/browse/LUCENE-4332?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13443512#comment-13443512
 ] 

Uwe Schindler commented on LUCENE-4332:
---------------------------------------

You would need a simple Security manager that allows all, except 
creating/deleting some files outside a working directory. We can check this out 
(by enabling a noop security manager), if it then still passes we are fine.

Then we can go forward. The security manager would only be activated by LTC 
before after a test class and then disabled again. I would not restrict file 
access too much. For Pitest, I would only disallow everything outside working 
directory root and later disable more. I think a simple restriction to build/ 
dir would also help to prevent solr creating files in test-files src folder.

An all-allowing security manager is easy, template is available to extend. The 
problem you are talking about are too complex security restrictions dictated by 
J2EE (that limit things like creating classes or classloader) - we dont want to 
do this, we only want a hook into (new FileOutputStream) and want to throw an 
Exception on wrong path. If you allow all other security manager requests, 
there is no issue.
                
> Integrate PiTest mutation coverage tool into build
> --------------------------------------------------
>
>                 Key: LUCENE-4332
>                 URL: https://issues.apache.org/jira/browse/LUCENE-4332
>             Project: Lucene - Core
>          Issue Type: Improvement
>    Affects Versions: 4.1, 5.0
>            Reporter: Greg Bowyer
>            Assignee: Greg Bowyer
>              Labels: build
>         Attachments: 
> LUCENE-4332-Integrate-PiTest-mutation-coverage-tool-into-build.patch, 
> LUCENE-4332-Integrate-PiTest-mutation-coverage-tool-into-build.patch
>
>
> As discussed briefly on the mailing list, this patch is an attempt to 
> integrate the PiTest mutation coverage tool into the lucene build

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org

Reply via email to