Fix tests

Signed-off-by: Gulshan Kumar <[email protected]>

Author: kumargu

libs/agent-sm/agent/src/main/java/org/opensearch/javaagent/SocketChannelInterceptor.java

@@ -52,19 +52,20 @@ public static void intercept(@Advice.AllArguments Object[] args, @Origin Method
         if (args[0] instanceof InetSocketAddress address) {
             if (!AgentPolicy.isTrustedHost(address.getHostString())) {
                 final String host = address.getHostString() + ":" + address.getPort();
-
-                final SocketPermission permission = new SocketPermission(host, "connect,resolve");
+                final SocketPermission connectResolve = new SocketPermission("*", "connect,resolve");
+                final SocketPermission allSocketActions = new SocketPermission("*", "connect,resolve,listen,accept");
                 for (final ProtectionDomain domain : callers) {
-                    if (!policy.implies(domain, permission)) {
-                        throw new SecurityException("Denied access to: " + host + ", domain " + domain);
+                    boolean hasPermission = policy.implies(domain, connectResolve) || policy.implies(domain, allSocketActions);
+                    if (!hasPermission) {
+                        throw new SecurityException("Denied access to: " + host + ", domain: " + domain);
                     }
                 }
             }
         } else if (args[0] instanceof UnixDomainSocketAddress address) {
             final NetPermission permission = new NetPermission("accessUnixDomainSocket");
             for (final ProtectionDomain domain : callers) {
                 if (!policy.implies(domain, permission)) {
-                    throw new SecurityException("Denied access to: " + address + ", domain " + domain);
+                    throw new SecurityException("Denied access to: " + address + ", domain: " + domain);
                 }
             }
         }

plugins/repository-hdfs/src/test/resources/org/opensearch/repositories/hdfs/test.policy

@@ -0,0 +1,4 @@
+grant {
+  permission java.net.SocketPermission "*", "connect,resolve,listen,accept";
+  permission java.net.NetPermission "accessUnixDomainSocket";
+};

plugins/repository-hdfs/src/test/resources/rest-api-spec/test/hdfs_repository/test.policy

@@ -0,0 +1,4 @@
+grant {
+  permission java.net.SocketPermission "*", "connect,resolve,listen,accept";
+  permission java.net.NetPermission "accessUnixDomainSocket";
+};

plugins/repository-hdfs/src/test/resources/rest-api-spec/test/secure_hdfs_repository/test.policy

@@ -0,0 +1,4 @@
+grant {
+  permission java.net.SocketPermission "*", "connect,resolve,listen,accept";
+  permission java.net.NetPermission "accessUnixDomainSocket";
+};