Grant getClassLoader

Signed-off-by: Ryan Liang <jiallian@amazon.com>
opensearch-project · Sep 27, 2023 · 6e1f9f0 · 6e1f9f0
1 parent a38a6a5
commit 6e1f9f0
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/server/src/main/resources/org/opensearch/bootstrap/security.policy b/server/src/main/resources/org/opensearch/bootstrap/security.policy
@@ -37,6 +37,10 @@
 //// SecurityManager impl:
 //// Must have all permissions to properly perform access checks
 
+grant {
+  permission java.lang.RuntimePermission "getClassLoader";
+};
+
 grant codeBase "${codebase.opensearch-secure-sm}" {
   permission java.security.AllPermission;
 };
@@ -48,6 +52,8 @@ grant codeBase "${codebase.opensearch}" {
   permission java.lang.RuntimePermission "setContextClassLoader";
   // needed for SPI class loading
   permission java.lang.RuntimePermission "accessDeclaredMembers";
+
+  permission java.lang.RuntimePermission "getClassLoader";
 };
 
 //// Very special jar permissions: