# The settings of java.policy

**URL:** <https://discuss.elastic.co/t/the-settings-of-java-policy/163296>\
**Category:** Elasticsearch\
**Created:** [January 8, 2019, 3:51am UTC](https://discuss.elastic.co/t/the-settings-of-java-policy/163296 "2019-01-08T03:51:21Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![li\_jessen2016](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/li_jessen2016/32/38817_2.png) [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Post date:** [January 8, 2019, 3:51am UTC](https://discuss.elastic.co/t/the-settings-of-java-policy/163296/1 "2019-01-08T03:51:21Z")

</div>

在java.policy中增加：  
grant codeBase "file: /user.home/elasticsearch-6.5.1/-",  
{  
permission java.security.AllPermission;  
};

The bootstrap check failed.

While when I add something like the following:  
grant codeBase "file: /user.home/elasticsearch-6.5.1/-",  
principal \* \*  
{  
permission java.security.AllPermission;  
};

The bootstrap passed. Why? Since actually I don't specify any principal.

---

<div class="post-metadata">

**Author:** ![s1monw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/s1monw/32/3637_2.png) [@s1monw](https://discuss.elastic.co/u/s1monw)\
**Post date:** [January 11, 2019, 9:13am UTC](https://discuss.elastic.co/t/the-settings-of-java-policy/163296/2 "2019-01-11T09:13:02Z")

</div>

I feel reluctant to help you disabling all security on elasticsearch. I don't think anybody should do this.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 8, 2019, 9:13am UTC](https://discuss.elastic.co/t/the-settings-of-java-policy/163296/3 "2019-02-08T09:13:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.