security manager for ec2 plugin

jakelandis · Nov 7, 2023 · 54fe5ac · 54fe5ac
1 parent 8a65ec5
commit 54fe5ac
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/plugins/discovery-ec2/src/main/plugin-metadata/plugin-security.policy b/plugins/discovery-ec2/src/main/plugin-metadata/plugin-security.policy
@@ -18,4 +18,9 @@ grant {
   permission java.net.SocketPermission "*", "connect";
 
   permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
+
+  // required for fips
+  permission java.security.SecurityPermission "getProperty.jdk.tls.disabledAlgorithms";
+  permission java.security.SecurityPermission "getProperty.jdk.certpath.disabledAlgorithms";
+  permission java.security.SecurityPermission "getProperty.keystore.type.compat";
 };