Wrap a call to QatZipper with AccessController.doPrivileged. (#211)

* Grant qat-java a permission to modify arbitrary thread. Signed-off-by: Ubuntu <[email protected]> Signed-off-by: Mulugeta Mammo <[email protected]> * Wrap a QatZipper() inside AccessController.doPrivileged(). Signed-off-by: Mulugeta Mammo <[email protected]> * Fix GitHib action workflows (#212) Signed-off-by: Andriy Redko <[email protected]> --------- Signed-off-by: Ubuntu <[email protected]> Signed-off-by: Mulugeta Mammo <[email protected]> Signed-off-by: Andriy Redko <[email protected]> Co-authored-by: Ubuntu <[email protected]> Co-authored-by: Andriy Redko <[email protected]>
opensearch-project · Jan 10, 2025 · 9de7fd3 · 9de7fd3
1 parent c1f8a55
commit 9de7fd3
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/main/java/org/opensearch/index/codec/customcodecs/QatZipperFactory.java b/src/main/java/org/opensearch/index/codec/customcodecs/QatZipperFactory.java
@@ -31,7 +31,9 @@ public class QatZipperFactory {
      * @param pmode polling mode.
      */
     public static QatZipper createInstance(Algorithm algorithm, int level, Mode mode, int retryCount, PollingMode pmode) {
-        return new QatZipper(algorithm, level, mode, retryCount, pmode);
+        return java.security.AccessController.doPrivileged(
+            (java.security.PrivilegedAction<QatZipper>) () -> new QatZipper(algorithm, level, mode, retryCount, pmode)
+        );
     }
 
     /**