Increased the scope of File Interceptor to intercept methods from FileSystemProvider.class #17989

pranu2502 · 2025-04-17T11:06:52Z

Description

Increased the scope o File Interceptor to intercept methods from FileSystemProvider.class and modified the i conditions to catch args baded on theit class types

Related Issues

Resolves #[Issue number to be closed when this PR is merged]

Check List

Functionality includes testing.
API changes companion pull request created, if applicable.
Public documentation issue/PR created, if applicable.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

github-actions · 2025-04-17T11:11:57Z

❌ Gradle check result for e5c1ac7: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-04-17T15:10:03Z

❌ Gradle check result for e5c1ac7: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

libs/agent-sm/agent/src/main/java/org/opensearch/javaagent/FileInterceptor.java

github-actions · 2025-04-18T07:54:47Z

❌ Gradle check result for 4825849: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-04-18T09:45:53Z

❌ Gradle check result for 8aa9cdc: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-04-18T10:05:20Z

❌ Gradle check result for 355d48b: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-04-21T12:14:59Z

❌ Gradle check result for 8771d25: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-04-21T13:22:33Z

❌ Gradle check result for 7696898: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

cwperks · 2025-04-21T13:50:11Z

@reta FYI This is another instance where the agent is divergent from JSM with stack walking. The agent is not currently blocking newByteChannel calls as expected since its not included on this line.

After adding a check for newByteChannel (in addition to open) many tests are failing with this stack trace:

1> Caused by: java.lang.SecurityException: Denied OPEN (read) access to file: /sys/fs/cgroup/user.slice/user-1000.slice/session-3.scope/memory.swap.max, domain: ProtectionDomain  (file:/var/jenkins/workspace/gradle-check/search/server/build/distributions/opensearch-3.0.0-SNAPSHOT.jar <no signer certificates>)
  1>  jdk.internal.loader.ClassLoaders$AppClassLoader@36baf30c
  1>  <no principals>
  1>  java.security.Permissions@78010bbd (
  1>  ("java.net.SocketPermission" "localhost:0" "listen,resolve")
  1>  ("java.io.FilePermission" "/var/jenkins/workspace/gradle-check/search/ser  1> ver/build/distributions/opensearch-3.0.0-SNAPSHOT.jar#plus" "read")
  1>  ("java.io.FilePermission" "/var/jenkins/workspace/gradle-check/search/server/build/distributions/opensearch-3.0.0-SNAPSHOT.jar" "read")
  1>  ("java.lang.RuntimePermission" "accessClassInPackage.com.sun.beans.*")
  1>  ("java.lang.RuntimePermission" "accessClassInPackage.com.apple.*")
  1>  ("java.lang.RuntimePermission" "accessClassInPackage.com.sun.java.swing.plaf.*")
  1>  ("java.lang.RuntimePermission" "exitVM")
  1>  ("java.lang.RuntimePermission" "accessClassInPackage.com.sun.beans")
  1>  ("java.util.PropertyPermission" "java.specification.version" "read")
  1>  ("java.util.PropertyPermission" "java.vm.vendor" "read")
  1>  ("java.util.PropertyPermission" "path.separator" "read")
  1>  ("java.util.PropertyPermission" "os.version" "read")
  1>  ("java.util.PropertyPermission" "java.vendor.url" "read")
  1>  ("java.util.PropertyPermission" "java.vm.name" "read")
  1>  ("java.util.PropertyPermission" "java.vm.specification.version" "read")
  1>  ("java.util.PropertyPermission" "os.name" "read")
  1>  ("java.util.PropertyPermission" "java.version" "read")
  1>  ("java.util.PropertyPermission" "os.arch" "read")
  1>  ("java.util.PropertyPermission" "java.specification.vendor" "read")
  1>  ("java.util.PropertyPermission" "java.vm.specification.name" "read")
  1>  ("java.util.PropertyPermission" "file.separator" "read")
  1>  ("java.util.PropertyPermission" "line.separator" "read")
  1>  ("java.util.PropertyPermission" "java.vm.specification.vendor" "read")
  1>  ("java.util.PropertyPermission" "java.specification.name" "read")
  1>  ("java.util.PropertyPermission" "java.vendor" "read")
  1>  ("java.util.PropertyPermission" "java.vm.version" "read")
  1>  ("java.util.PropertyPermission" "java.specification.maintenance.version" "read")
  1>  ("java.util.PropertyPermission" "java.class.version" "read")
  1> )


  1> 	at java.nio.file.Files.newByteChannel(Files.java:426) ~[?:?]
  1> 	at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:420) ~[?:?]
  1> 	at java.nio.file.Files.newInputStream(Files.java:160) ~[?:?]
  1> 	at java.nio.file.Files.newBufferedReader(Files.java:2910) ~[?:?]
  1> 	at java.nio.file.Files.newBufferedReader(Files.java:2943) ~[?:?]
  1> 	at jdk.internal.platform.CgroupUtil.lambda$readStringValue$1(CgroupUtil.java:67) ~[?:?]
  1> 	at java.security.AccessController.doPrivileged(AccessController.java:571) ~[?:?]
  1> 	at jdk.internal.platform.CgroupUtil.readStringValue(CgroupUtil.java:69) ~[?:?]
  1> 	at jdk.internal.platform.CgroupSubsystemController.getStringValue(CgroupSubsystemController.java:65) ~[?:?]
  1> 	at jdk.internal.platform.cgroupv2.CgroupV2Subsystem.getMemoryAndSwapLimit(CgroupV2Subsystem.java:268) ~[?:?]
  1> 	at jdk.internal.platform.CgroupMetrics.getMemoryAndSwapLimit(CgroupMetrics.java:151) ~[?:?]
  1> 	at com.sun.management.internal.OperatingSystemImpl.getTotalSwapSpaceSize(OperatingSystemImpl.java:184) ~[?:?]
  1> 	at jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103) ~[?:?]
  1> 	... 51 more
  1> [2025-04-18T10:01:57,144][WARN ][o.o.m.o.OsProbe          ] [testRangeQueriesWithNow] exception retrieving free swap space size
  1> java.lang.reflect.InvocationTargetException: null
  1> 	at jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:118) ~[?:?]
  1> 	at java.lang.reflect.Method.invoke(Method.java:580) ~[?:?]
  1> 	at org.opensearch.monitor.os.OsProbe.getFreeSwapSpaceSize(OsProbe.java:151) ~[opensearch-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
  1> 	at org.opensearch.monitor.os.OsProbe.osStats(OsProbe.java:694) ~[opensearch-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
  1> 	at org.opensearch.monitor.os.OsService.<init>(OsService.java:71) ~[opensearch-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
  1> 	at org.opensearch.monitor.MonitorService.<init>(MonitorService.java:64) ~[opensearch-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
  1> 	at org.opensearch.node.Node.<init>(Node.java:787) ~[opensearch-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
  1> 	at org.opensearch.node.MockNode.<init>(MockNode.java:121) ~[framework-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
  1> 	at org.opensearch.node.MockNode.<init>(MockNode.java:109) ~[framework-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
  1> 	at org.opensearch.node.MockNode.<init>(MockNode.java:100) ~[framework-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
  1> 	at org.opensearch.test.OpenSearchSingleNodeTestCase.newNode(OpenSearchSingleNodeTestCase.java:275) ~[framework-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
  1> 	at com.carrotsearch.randomizedtesting.RandomizedContext.runWithPrivateRandomness(RandomizedContext.java:187) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.RandomizedContext.runWithPrivateRandomness(RandomizedContext.java:211) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at org.opensearch.test.OpenSearchSingleNodeTestCase.startNode(OpenSearchSingleNodeTestCase.java:106) ~[framework-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
  1> 	at org.opensearch.test.OpenSearchSingleNodeTestCase.setUp(OpenSearchSingleNodeTestCase.java:145) ~[framework-3.0.0-SNAPSHOT.jar:3.0.0-SNAPSHOT]
  1> 	at jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103) ~[?:?]
  1> 	at java.lang.reflect.Method.invoke(Method.java:580) ~[?:?]
  1> 	at com.carrotsearch.randomizedtesting.RandomizedRunner.invoke(RandomizedRunner.java:1750) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.RandomizedRunner$9.evaluate(RandomizedRunner.java:972) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.RandomizedRunner$10.evaluate(RandomizedRunner.java:988) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at org.junit.rules.RunRules.evaluate(RunRules.java:20) ~[junit-4.13.2.jar:4.13.2]
  1> 	at org.apache.lucene.tests.util.TestRuleSetupTeardownChained$1.evaluate(TestRuleSetupTeardownChained.java:48) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at org.apache.lucene.tests.util.AbstractBeforeAfterRule$1.evaluate(AbstractBeforeAfterRule.java:43) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at org.apache.lucene.tests.util.TestRuleThreadAndTestName$1.evaluate(TestRuleThreadAndTestName.java:45) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at org.apache.lucene.tests.util.TestRuleIgnoreAfterMaxFailures$1.evaluate(TestRuleIgnoreAfterMaxFailures.java:60) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at org.apache.lucene.tests.util.TestRuleMarkFailure$1.evaluate(TestRuleMarkFailure.java:44) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at org.junit.rules.RunRules.evaluate(RunRules.java:20) ~[junit-4.13.2.jar:4.13.2]
  1> 	at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.ThreadLeakControl$StatementRunner.run(ThreadLeakControl.java:368) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.ThreadLeakControl.forkTimeoutingTask(ThreadLeakControl.java:817) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.ThreadLeakControl$3.evaluate(ThreadLeakControl.java:468) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.RandomizedRunner.runSingleTest(RandomizedRunner.java:947) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.RandomizedRunner$5.evaluate(RandomizedRunner.java:832) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.RandomizedRunner$6.evaluate(RandomizedRunner.java:883) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.RandomizedRunner$7.evaluate(RandomizedRunner.java:894) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at org.apache.lucene.tests.util.AbstractBeforeAfterRule$1.evaluate(AbstractBeforeAfterRule.java:43) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at org.apache.lucene.tests.util.TestRuleStoreClassName$1.evaluate(TestRuleStoreClassName.java:38) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at com.carrotsearch.randomizedtesting.rules.NoShadowingOrOverridesOnMethodsRule$1.evaluate(NoShadowingOrOverridesOnMethodsRule.java:40) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.rules.NoShadowingOrOverridesOnMethodsRule$1.evaluate(NoShadowingOrOverridesOnMethodsRule.java:40) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at org.apache.lucene.tests.util.TestRuleAssertionsRequired$1.evaluate(TestRuleAssertionsRequired.java:53) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at org.apache.lucene.tests.util.AbstractBeforeAfterRule$1.evaluate(AbstractBeforeAfterRule.java:43) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at org.apache.lucene.tests.util.TestRuleMarkFailure$1.evaluate(TestRuleMarkFailure.java:44) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at org.apache.lucene.tests.util.TestRuleIgnoreAfterMaxFailures$1.evaluate(TestRuleIgnoreAfterMaxFailures.java:60) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at org.apache.lucene.tests.util.TestRuleIgnoreTestSuites$1.evaluate(TestRuleIgnoreTestSuites.java:47) ~[lucene-test-framework-10.1.0.jar:10.1.0 884954006de769dc43b811267230d625886e6515 - 2024-12-17 16:15:44]
  1> 	at org.junit.rules.RunRules.evaluate(RunRules.java:20) ~[junit-4.13.2.jar:4.13.2]
  1> 	at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at com.carrotsearch.randomizedtesting.ThreadLeakControl$StatementRunner.run(ThreadLeakControl.java:368) ~[randomizedtesting-runner-2.7.1.jar:?]
  1> 	at java.lang.Thread.run(Thread.java:1583) [?:?]

As you can see from the stack trace, its coming from instantiating the MonitoringService on the Node Bootstrap flow, which ends up calling OsProbe.getFreeSwapSpaceSize which is coming from the OperatingSystemMxBean

In the stack trace I can see AccessController.doPrivileged with all JDK classes above the frame. With JSM authz is skipped here since its all JDK classes, but with the agent its going further up the stack.

In this case, will we need to grants in security.policy similar to all of the new SocketPermission declarations since the agent was merged?

ref Jenkins run with failures after intercepting newByteChannel: https://build.ci.opensearch.org/job/gradle-check/56685/consoleText

github-actions · 2025-04-21T17:16:25Z

❌ Gradle check result for 07fee01: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

server/src/main/resources/org/opensearch/bootstrap/test-framework.policy

github-actions · 2025-04-21T19:05:49Z

❌ Gradle check result for da2a39b: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

libs/agent-sm/agent/src/main/java/org/opensearch/javaagent/FileInterceptor.java

libs/agent-sm/agent/build.gradle

reta · 2025-04-21T23:01:01Z

@reta FYI This is another instance where the agent is divergent from JSM with stack walking. The agent is not currently blocking newByteChannel calls as expected since its not included on this line.

@cwperks you are very right, we have quite large API surface to cover, the incremental approach (like this one) would help us to close the gaps for sure, thank you

In this case, will we need to grants in security.policy similar to all of the new SocketPermission declarations since the agent was merged?

Yes, we may need to update policies, thank you.

server/src/main/resources/org/opensearch/bootstrap/test-framework.policy

github-actions · 2025-04-22T07:02:15Z

❌ Gradle check result for b89a18c: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-04-22T07:36:09Z

❌ Gradle check result for 4da2f19: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-05-03T11:11:16Z

❌ Gradle check result for 4b869b0: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-05-03T11:54:31Z

❌ Gradle check result for e27ef3c: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-05-03T13:29:30Z

❌ Gradle check result for 943d3c7: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-05-03T14:13:23Z

❌ Gradle check result for bcd6044: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-05-03T15:22:02Z

❌ Gradle check result for a8c3dab: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

github-actions · 2025-05-03T16:12:55Z

❌ Gradle check result for 58fb0d7: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

…SystemProvider.class Signed-off-by: Pranav Reddy <[email protected]>

… being thrown Signed-off-by: Pranav Reddy <[email protected]>

Signed-off-by: Pranav Reddy <[email protected]>

…File Interceptor Signed-off-by: Pranav Reddy <[email protected]>

Signed-off-by: Pranav Reddy <[email protected]>

github-actions · 2025-05-03T19:04:55Z

✅ Gradle check result for fb808c8: SUCCESS

pranu2502 changed the title ~~Increased the scope o File Interceptor ro intercept methods from FileSystemProvider.class~~ Increased the scope of File Interceptor ro intercept methods from FileSystemProvider.class Apr 17, 2025

cwperks reviewed Apr 17, 2025

View reviewed changes

libs/agent-sm/agent/src/main/java/org/opensearch/javaagent/FileInterceptor.java Show resolved Hide resolved

pranu2502 force-pushed the main branch from c4e88df to 4825849 Compare April 18, 2025 07:46

pranu2502 force-pushed the main branch from 4825849 to fa9570f Compare April 18, 2025 09:22

pranu2502 changed the title ~~Increased the scope of File Interceptor ro intercept methods from FileSystemProvider.class~~ Increased the scope of File Interceptor to intercept methods from FileSystemProvider.class Apr 18, 2025

pranu2502 force-pushed the main branch from 8aa9cdc to 355d48b Compare April 18, 2025 09:47

This was referenced Apr 18, 2025

[AUTOCUT] Gradle Check Flaky Test Report for UpdateByQueryBasicTests #16439

Open

[AUTOCUT] Gradle Check Flaky Test Report for DeleteByQueryConcurrentTests #17933

Open

[AUTOCUT] Gradle Check Flaky Test Report for RethrottleTests #17937

Open

pranu2502 force-pushed the main branch from bf75e15 to 07fee01 Compare April 21, 2025 16:38

opensearch-ci-bot mentioned this pull request Apr 21, 2025

[AUTOCUT] Gradle Check Flaky Test Report for GoogleCloudStorageBlobContainerRetriesTests #17744

Open

cwperks reviewed Apr 21, 2025

View reviewed changes

server/src/main/resources/org/opensearch/bootstrap/test-framework.policy Outdated Show resolved Hide resolved

cwperks reviewed Apr 21, 2025

View reviewed changes

libs/agent-sm/agent/src/main/java/org/opensearch/javaagent/FileInterceptor.java Outdated Show resolved Hide resolved

reta reviewed Apr 21, 2025

View reviewed changes

libs/agent-sm/agent/build.gradle Outdated Show resolved Hide resolved

cwperks mentioned this pull request Apr 21, 2025

Limit stack walking in the java agent to frames before the call to AccessController.doPrivileged #17894

Merged

3 tasks

reta reviewed Apr 21, 2025

View reviewed changes

server/src/main/resources/org/opensearch/bootstrap/test-framework.policy Outdated Show resolved Hide resolved

pranu2502 closed this Apr 25, 2025

pranu2502 force-pushed the main branch from 4b869b0 to e27ef3c Compare May 3, 2025 11:28

pranu2502 force-pushed the main branch from e27ef3c to 943d3c7 Compare May 3, 2025 12:42

pranu2502 force-pushed the main branch from 943d3c7 to bcd6044 Compare May 3, 2025 13:48

pranu2502 force-pushed the main branch from bcd6044 to a8c3dab Compare May 3, 2025 14:41

pranu2502 force-pushed the main branch from a8c3dab to 58fb0d7 Compare May 3, 2025 15:26

pranu2502 and others added 7 commits May 3, 2025 23:27

Increased the scope o File Interceptor ro intercept methods from File…

0bbe01b

…SystemProvider.class Signed-off-by: Pranav Reddy <[email protected]>

Added negative Integ Tests to validate the correct Security Exception…

41eec59

… being thrown Signed-off-by: Pranav Reddy <[email protected]>

Fixed failing negative tests because of file exist assertions

07da4bf

Signed-off-by: Pranav Reddy <[email protected]>

Added a deny default Security Exception for unknown arfumen types in …

ea17a0b

…File Interceptor Signed-off-by: Pranav Reddy <[email protected]>

Fixed File Permission substitution for Integ test Log files

7a8ec58

Signed-off-by: Pranav Reddy <[email protected]>

Fixes issue with system property substition in policy file parsing

1687680

Signed-off-by: Pranav Reddy <[email protected]>

Added ChangeLog for newByteChannel Interception

fb808c8

Signed-off-by: Pranav Reddy <[email protected]>

pranu2502 force-pushed the main branch from 58fb0d7 to fb808c8 Compare May 3, 2025 17:57

kumargu approved these changes May 4, 2025

View reviewed changes

cwperks approved these changes May 6, 2025

View reviewed changes

cwperks merged commit 70e890a into opensearch-project:main May 6, 2025
29 of 30 checks passed

cwperks mentioned this pull request May 9, 2025

Switch guava deps from compileOnly to implementation opensearch-project/security-analytics#1530

Merged

5 tasks

opensearch-ci-bot mentioned this pull request May 23, 2025

[AUTOCUT] Gradle Check Flaky Test Report for IndexingIT #14302

Open

opensearch-ci-bot mentioned this pull request Jun 12, 2025

[AUTOCUT] Gradle Check Flaky Test Report for InternalEngineTests #15838

Open

BrewTestBot mentioned this pull request Jun 24, 2025

opensearch 3.1.0 Homebrew/homebrew-core#228059

Merged

Increased the scope of File Interceptor to intercept methods from FileSystemProvider.class #17989

Increased the scope of File Interceptor to intercept methods from FileSystemProvider.class #17989

Uh oh!

Conversation

pranu2502 commented Apr 17, 2025

Description

Related Issues

Check List

Uh oh!

github-actions bot commented Apr 17, 2025

Uh oh!

github-actions bot commented Apr 17, 2025

Uh oh!

Uh oh!

github-actions bot commented Apr 18, 2025

Uh oh!

github-actions bot commented Apr 18, 2025

Uh oh!

github-actions bot commented Apr 18, 2025

Uh oh!

github-actions bot commented Apr 21, 2025

Uh oh!

github-actions bot commented Apr 21, 2025

Uh oh!

cwperks commented Apr 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Apr 21, 2025

Uh oh!

Uh oh!

github-actions bot commented Apr 21, 2025

Uh oh!

Uh oh!

Uh oh!

reta commented Apr 21, 2025

Uh oh!

Uh oh!

github-actions bot commented Apr 22, 2025

Uh oh!

github-actions bot commented Apr 22, 2025

Uh oh!

github-actions bot commented May 3, 2025

Uh oh!

github-actions bot commented May 3, 2025

Uh oh!

github-actions bot commented May 3, 2025

Uh oh!

github-actions bot commented May 3, 2025

Uh oh!

github-actions bot commented May 3, 2025

Uh oh!

github-actions bot commented May 3, 2025

Uh oh!

github-actions bot commented May 3, 2025

Uh oh!

Uh oh!

Uh oh!

cwperks commented Apr 21, 2025 •

edited

Loading