[Security Manager Replacement] Native Java Agent (dynamic code rewrit…

…ing, must be low overhead) Signed-off-by: Andriy Redko <[email protected]>
opensearch-project · Nov 27, 2024 · 7088bf8 · 7088bf8
1 parent 5817710
commit 7088bf8
Show file tree

Hide file tree

Showing 11 changed files with 3,823 additions and 15 deletions.
diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle
@@ -171,8 +171,8 @@ if (project != rootProject) {
 
   allprojects {
     java {
-        targetCompatibility = JavaVersion.VERSION_11
-        sourceCompatibility = JavaVersion.VERSION_11
+        targetCompatibility = JavaVersion.VERSION_17
+        sourceCompatibility = JavaVersion.VERSION_17
     }
   }
 

diff --git a/buildSrc/src/main/resources/minimumRuntimeVersion b/buildSrc/src/main/resources/minimumRuntimeVersion
@@ -1 +1 @@
-11
+17
diff --git a/libs/build.gradle b/libs/build.gradle
@@ -40,19 +40,21 @@ subprojects {
    * other libs. This keeps our dependencies simpler.
    */
   project.afterEvaluate {
-    configurations.all { Configuration conf ->
-      dependencies.matching { it instanceof ProjectDependency }.all { ProjectDependency dep ->
-        Project depProject = project.project(dep.path)
-        if (depProject != null
-          && (false == depProject.path.equals(':libs:opensearch-core') &&
-              false == depProject.path.equals(':libs:opensearch-common'))
-          && depProject.path.startsWith(':libs')) {
-          throw new InvalidUserDataException("projects in :libs "
-            + "may not depend on other projects libs except "
-            + ":libs:opensearch-core or :libs:opensearch-common but "
-            + "${project.path} depends on ${depProject.path}")
+    if (!project.path.equals(':libs:agent-sm:agent')) {
+        configurations.all { Configuration conf ->
+          dependencies.matching { it instanceof ProjectDependency }.all { ProjectDependency dep ->
+            Project depProject = project.project(dep.path)
+            if (depProject != null
+              && (false == depProject.path.equals(':libs:opensearch-core') &&
+                  false == depProject.path.equals(':libs:opensearch-common'))
+              && depProject.path.startsWith(':libs')) {
+              throw new InvalidUserDataException("projects in :libs "
+                + "may not depend on other projects libs except "
+                + ":libs:opensearch-core or :libs:opensearch-common but "
+                + "${project.path} depends on ${depProject.path}")
+            }
+          }
         }
-      }
     }
   }
 }