Re: [DISCUSS] SIP-24 Java Security Manager replacement

2025-06-30 Thread Gus Heck
This was the original ticket/discussion over there when the issue first came up in 2021 https://github.com/opensearch-project/OpenSearch/issues/1687 On Mon, Jun 30, 2025 at 4:47 PM Jan Høydahl wrote: > Hi, > > Opensearch has released v3.0 with their new java agent capable of > filtering network

Re: [DISCUSS] SIP-24 Java Security Manager replacement

2025-06-30 Thread Jan Høydahl
Hi, Opensearch has released v3.0 with their new java agent capable of filtering network and file access. They wrote a blog post about their thinking here https://opensearch.org/blog/finding-a-replacement-for-jsm-in-opensearch-3-0/ This is for information / food for thought. Please don't read it

Re: [DISCUSS] SIP-24 Java Security Manager replacement

2025-06-30 Thread David Smiley
I think Eric proposes _completely_ removing Solr's references to the security manager (and thus not use it) in Solr main/10. Such a move wouldn't block pursuing alternatives discussed in the SIP. On Thu, Jun 5, 2025 at 11:45 AM Houston Putman wrote: > Sorry for the late reply, been vacationing

Re: Remove Security Manager in 10?

2025-06-30 Thread David Smiley
I recommend that you add to an existing thread instead of start a new one. This broad subject has too many places to discuss as it is. DISCUSS SIP-24 -- let's do there? On Thu, Jun 26, 2025 at 4:41 PM David Eric Pugh wrote: > Considering all the discussions back and forth about the Java Securit