Hack in bytebuddy settings for apm

stu-elastic · Feb 1, 2024 · 72108da · 72108da
1 parent 1091f71
commit 72108da
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/modules/apm/src/main/plugin-metadata/plugin-security.policy b/modules/apm/src/main/plugin-metadata/plugin-security.policy
@@ -29,4 +29,15 @@ grant codeBase "${codebase.elastic-apm-agent}" {
     permission java.io.FilePermission "<<ALL FILES>>", "read,write";
     permission org.elasticsearch.secure_sm.ThreadPermission "modifyArbitraryThreadGroup";
     permission java.net.NetPermission "getProxySelector";
+  permission java.lang.RuntimePermission "getClassLoader";
+  permission java.lang.RuntimePermission "createClassLoader";
+  permission java.lang.RuntimePermission "accessDeclaredMembers";
+  permission java.lang.RuntimePermission "net.bytebuddy.createJavaDispatcher";
+  permission java.lang.RuntimePermission "accessClassInPackage.sun.misc";
+  permission java.lang.RuntimePermission "accessClassInPackage.jdk.internal";
+  permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
+  permission java.lang.reflect.ReflectPermission "newProxyInPackage.net.bytebuddy.utility";
+  permission java.lang.reflect.ReflectPermission "newProxyInPackage.net.bytebuddy.dynamic.loading";
+  permission java.lang.reflect.ReflectPermission "newProxyInPackage.net.bytebuddy.description.type";
+  permission java.lang.reflect.ReflectPermission "newProxyInPackage.net.bytebuddy.description.method";
 };
diff --git a/server/src/main/java/org/elasticsearch/bootstrap/PolicyUtil.java b/server/src/main/java/org/elasticsearch/bootstrap/PolicyUtil.java
@@ -106,6 +106,12 @@ public boolean test(Permission permission) {
             new RuntimePermission("loadLibrary.*"),
             new RuntimePermission("accessClassInPackage.*"),
             new RuntimePermission("accessDeclaredMembers"),
+            new RuntimePermission("net.bytebuddy.createJavaDispatcher"),
+            new ReflectPermission("newProxyInPackage.net.bytebuddy.description.method"),
+            new ReflectPermission("newProxyInPackage.net.bytebuddy.description.type"),
+            new ReflectPermission("newProxyInPackage.net.bytebuddy.description.method"),
+            new ReflectPermission("newProxyInPackage.net.bytebuddy.dynamic.loading"),
+            new ReflectPermission("newProxyInPackage.net.bytebuddy.utility"),
             new NetPermission("requestPasswordAuthentication"),
             new NetPermission("getProxySelector"),
             new NetPermission("getCookieHandler"),