[SOLR-13984] Solr should run inside a SecurityManager

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 8.5
• Assignee: Robert Muir
• Reporter: Ishan Chattopadhyaya
• Created: 30/Nov/19 15:49
• Updated: 24/Mar/20 12:46
• Resolved: 24/Dec/19 14:34

Description

To reduce the effect of attacks, esp. RCE, Solr should run inside a SecurityManager.

Quoting Uwe here:

The correct way to fix all issues we have seen the last time is very simple: LET'S RUN SOLR INSIDE A SECURITY MANAGER IN PRODUCTION (like in tests). Elasticsearch is doing this, so please please let's do this instead. But this requires to finally get rid of the webapplication and start.jar and add our own bootstrapping (like in tests) that configure Jetty and Security Manager from our own org.apache.solr.bootstrap.Main.java (or similar).

https://jira.apache.org/jira/browse/SOLR-12316?focusedCommentId=16465038&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-16465038

Issue Links

• is blocked by: SOLR-13986 remove "execute" permission from solr-tests.policy
• links to: GitHub Pull Request #1082