SOLR-17767: Add a Java Agent (SIP-24)#4471

Open

janhoy wants to merge 66 commits into

apache:mainfrom

janhoy:15868-java-agent

Commits on May 26, 2026

Commits on May 27, 2026

Commits on May 28, 2026

SOLR-17767: Policy and Docker fixes (symDir, proc/sys, cleanup user)
janhoy
committed
Fix UnnecessarilyFullyQualified: import Field in AgentViolationBridge
janhoy
committed
args[1] bug

janhoy
and
Copilot
authored
Fix wrong JIRA in changelog file
janhoy
committed
Fix security-agent.adoc: correct policy variable names in docs table
janhoy
committed
Fix agent-security-extra.policy: correct supported variable names in comment
janhoy
committed
Fix security-agent.adoc: clarify env-var mapping direction in variable substitution
janhoy
committed
Fix typo in security-agent.adoc: "of if" → "or if"
janhoy
committed
Combine Runtime.class transform chains into one to avoid duplicate redefinition
janhoy
committed
Use setReporter() method instead of reflective field write in AgentViolationBridge
janhoy
committed
Add normalize() to FileInterceptor to prevent path-traversal bypass
janhoy
committed
Remove dead 'read' interceptor branch: no java.nio.file.Files.read() method
janhoy
committed
Use Path.startsWith(Path) in PermittedPath to fix Windows separator handling
janhoy
committed
Preserve line number and cause in PolicyFileParser.expand() exception
janhoy
committed
Fix test to actually verify that malformed extra policy throws ISE
janhoy
committed
Throw ISE instead of silently logging to stderr when observableLongCounter not found
janhoy
committed
Use null (bootstrap) classloader consistently for agent class lookups
janhoy
committed
Catch Exception (not just ISE) in bootAgent to prevent NPE on unexpected errors
janhoy
committed
Fail-fast on garbage policy content; allow empty/comment-only operator files
janhoy
committed
Use single labeled OTel counter for violation metrics instead of four separate counters
janhoy
committed
Move OTel metric registration to AgentViolationMetrics in solr:core
janhoy
committed
Simplify javadoc and inline comments in agent-sm classes
janhoy
committed
Fix FileInterceptor enforcement bugs found in self code review
janhoy
committed
Move test-only check helpers out of production interceptors
janhoy
committed
Fix BATS metric assertion to not depend on OTel label order
janhoy
committed
Treat unknown OpenOption argument type as mutating instead of throwing
janhoy
committed
Fix AgentPolicy Javadoc: class-name matching is prefix/exact, not regex
janhoy
committed
Fix isCallerFromCodeBase: normalize path separators for Windows
janhoy
committed
Fix FileInterceptor: resolve symlinks via toRealPath() in advice
janhoy
committed
Drop unused @Origin Method param from SocketChannelInterceptor.intercept
janhoy
committed
Fix codeBase-scoped exitVM/exec grants being silently no-ops
janhoy
committed
Improve agents instruction around code comments, which tend to be too verbose.
janhoy
committed
Fix PermittedPath.permits: use Set membership instead of substring match
janhoy
committed
Fix matchesEndpoint: strip brackets from IPv6 policy entries
janhoy
committed

Commits on May 30, 2026