Skip to content

[JENKINS-24399] A test to reproduce JENKINS-24399#4

Merged
jglick merged 1 commit intojenkinsci:masterfrom
ikedam:feature/JENKINS-24399_ClassDirectoryProblem
Apr 11, 2016
Merged

[JENKINS-24399] A test to reproduce JENKINS-24399#4
jglick merged 1 commit intojenkinsci:masterfrom
ikedam:feature/JENKINS-24399_ClassDirectoryProblem

Conversation

@ikedam
Copy link
Member

@ikedam ikedam commented Aug 24, 2014

This is a demonstration for JENKINS-24399 Modifying files in class directories can bypass approval in script-security (or class directories are accepted as classpaths).
Do not merge.

script-security 1.5 allows to use a class directory as an additional classpath.
This test shows that users can use class directories whose contents are modified without administrators' approval.

…s in class directories does not require approval.
@cloudbees-pull-request-builder

plugins » script-security-plugin #65 UNSTABLE
Looks like there's a problem with this pull request

@jenkinsadmin
Copy link
Member

Thank you for a pull request! Please check this document for how the Jenkins project handles pull requests

@ikedam
Copy link
Member Author

ikedam commented Aug 24, 2014

testClasspathWithClassDirectory fails as the build succeeds even after modified the contents of class directory.
When the library is modified after approval, the build using that library should fail without new approval.

@jglick jglick merged commit b380684 into jenkinsci:master Apr 11, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants