# Elastic Search AllPermission security manager issue

**URL:** <https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676>\
**Category:** Elasticsearch\
**Created:** [September 14, 2018, 8:21pm UTC](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676 "2018-09-14T20:21:47Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vishal\_Goel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_goel/32/46581_2.png) [@Vishal\_Goel](https://discuss.elastic.co/u/Vishal_Goel)\
**Post date:** [September 14, 2018, 8:21pm UTC](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676/1 "2018-09-14T20:21:47Z")

</div>

I am running elastic search with non loop-back IP (production mode) on Windows.  
To run ES, I am forking it out (elasticsearch.bat) from a Java app using ProcessBuilder.  
However, it is giving me following error:

```auto
[2018-09-15T00:04:42,617][INFO][o.e.b.BootstrapChecks] [PC-VISHALG] bound or publishing to a non-loopback address, enforcing bootstrap checks
[2018-09-15T00:04:42,632][ERROR][o.e.b.Bootstrap] [PC-VISHALG] node validation exception
[1] bootstrap checks failed
[1]: granting the all permission effectively disables security

```

It runs fine when I run it as dev mode. I know above issue is raised as part of bootstrap checks, but how to correct/avoid this issue. It has been a blocker for me.

This issue is coming on 6.3.1, 6.3.0 seems to be working fine.

Has anything changed around it in 6.3.1?

---

<div class="post-metadata">

**Author:** ![Vishal\_Goel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_goel/32/46581_2.png) [@Vishal\_Goel](https://discuss.elastic.co/u/Vishal_Goel)\
**Post date:** [September 14, 2018, 8:47pm UTC](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676/2 "2018-09-14T20:47:31Z")

</div>

On debugging more, seems to be issue is coming if I start the ES from a network mounted drive. What can be the reason for it?

---

<div class="post-metadata">

**Author:** ![rjernst](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rjernst/32/6363_2.png) [@rjernst](https://discuss.elastic.co/u/rjernst)\
**Post date:** [September 14, 2018, 10:29pm UTC](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676/3 "2018-09-14T22:29:12Z")

</div>

Do you have a global java security policy file setup? This bootstrap check ensures the security manager is not effectively disabled by granting all permissions. See [https://docs.oracle.com/javase/7/docs/technotes/guides/security/PolicyFiles.html](https://docs.oracle.com/javase/7/docs/technotes/guides/security/PolicyFiles.html) for locations the jvm will look for policy files.

---

<div class="post-metadata">

**Author:** ![Vishal\_Goel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_goel/32/46581_2.png) [@Vishal\_Goel](https://discuss.elastic.co/u/Vishal_Goel)\
**Post date:** [September 15, 2018, 5:35am UTC](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676/4 "2018-09-15T05:35:20Z")

</div>

It seems to be other issue to me. On debugging more, when I start ES directly (not via Java process builder), it starts well if ES installation is on my local drive.  
If ES installation is on network drive, it throws out above error. This happens only when ES is running in prod mode.

---

<div class="post-metadata">

**Author:** ![Vishal\_Goel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_goel/32/46581_2.png) [@Vishal\_Goel](https://discuss.elastic.co/u/Vishal_Goel)\
**Post date:** [September 15, 2018, 6:01pm UTC](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676/5 "2018-09-15T18:01:27Z")

</div>

Any insight here please?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 13, 2018, 6:01pm UTC](https://discuss.elastic.co/t/elastic-search-allpermission-security-manager-issue/148676/6 "2018-10-13T18:01:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
