Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Entitlements] Reintroduce entitlement check on System.exit #119757

Merged
merged 2 commits into from
Jan 8, 2025

Conversation

ldematte
Copy link
Contributor

@ldematte ldematte commented Jan 8, 2025

As discussed during our sync, we should re-introduce the entitlement check on System.exit.
It's not a contract that System.exit calls Runtime.exit; even if unlikely, its implementation could change in a future JDK release, leaving the method unchecked.
In general, now that we have a way to skip the double-check, we should instrument the whole public surface of the JDK (for the methods we need/want to check of course).

@ldematte ldematte added >non-issue :Core/Infra/Core Core issues without another label auto-backport Automatically create backport pull requests when merged v9.0.0 v8.18.0 test-entitlements Trigger CI checks using security manager replacement labels Jan 8, 2025
@ldematte ldematte requested review from prdoyle and rjernst and removed request for prdoyle January 8, 2025 13:47
@elasticsearchmachine elasticsearchmachine added the Team:Core/Infra Meta label for core/infra team label Jan 8, 2025
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-core-infra (Team:Core/Infra)

Copy link
Member

@rjernst rjernst left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ldematte ldematte merged commit 78890e9 into elastic:main Jan 8, 2025
21 checks passed
@ldematte ldematte deleted the entitlements/system-exit-again branch January 8, 2025 17:30
ldematte added a commit to ldematte/elasticsearch that referenced this pull request Jan 8, 2025
@elasticsearchmachine
Copy link
Collaborator

💚 Backport successful

Status Branch Result
8.x

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-backport Automatically create backport pull requests when merged :Core/Infra/Core Core issues without another label >non-issue Team:Core/Infra Meta label for core/infra team test-entitlements Trigger CI checks using security manager replacement v8.18.0 v9.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants