lucene-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dawid Weiss (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (LUCENE-4632) Restrict test-framework's write permissions more: Only allow write to per-JVM CWD and the clover.db.dir
Date Sat, 15 Dec 2012 23:24:12 GMT

    [ https://issues.apache.org/jira/browse/LUCENE-4632?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13533205#comment-13533205
] 

Dawid Weiss commented on LUCENE-4632:
-------------------------------------

I've just pushed 2.0.6 with this change.
                
> Restrict test-framework's write permissions more: Only allow write to per-JVM CWD and
the clover.db.dir
> -------------------------------------------------------------------------------------------------------
>
>                 Key: LUCENE-4632
>                 URL: https://issues.apache.org/jira/browse/LUCENE-4632
>             Project: Lucene - Core
>          Issue Type: Improvement
>            Reporter: Uwe Schindler
>            Assignee: Uwe Schindler
>             Fix For: 4.1, 5.0
>
>
> Currently we restring wrting to tests.tempDir after SOLR-4195, but it would be better
to restrict more and only let child JVMs write to their working dir and not outside (and maybe
corrumpt other JVMs).
> The problem with current setup is that the child JVM's policy file does not know the
runner number nor the absolute working directory (it must be absolute and platform-specific
with backslash/slash/... -> new File(".").getAbsolutePath().
> Dawid will release a new Junit4 package with a new sysprop passed to every child with
its full CWD: junit4.childvm.cwd
> In that case the policy file would use this property (and the clover.db.dir) to allow
write access and allow only read/execute access for the rest of the  filesystem.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lucene.apache.org
For additional commands, e-mail: dev-help@lucene.apache.org


Mime
View raw message