• Type: Improvement
• Resolution: Won't Fix
• Priority: Minor
• Component/s: subversion-plugin
• Labels:

  • externals
  • jenkins
  • scm
  • subversion
• Environment:

  Linux x86-64, Jenkins 1.565.3, Subversion Plug-in 2.4.5

[JENKINS-25871] Default "Ignore externals" checkbox to unchecked

Collapse comment: Daniel Beck added a comment - 2014-12-03 02:12

Daniel Beck added a comment - 2014-12-03 02:12

By design for security reasons, see wiki at https://wiki.jenkins-ci.org/display/JENKINS/Subversion+Plugin

Change default of ignoreExternalsOption to true. Add help text explaining some of the security risks involved in checking out externals (namely that they can be a route to hijacking credentials that in most cases have full read access to the entire repository and not just the limited subset of the repository that an individual committer's credentials may have read access to. The recommended way to handle externals is to add those as additional modules directly. Thus ensuring that even if a committers machine is hacked or otherwise compromised, their credentials cannot be used to commit a modified build script and svn:external definition that allows the entire contents of the Subversion repository to be zipped up and FTP'd to a remote server)

Since this issue does not argue against the reasons specified there, resolving as Won't Fix. Address those and it would make sense to reopen.

Expand comment: Daniel Beck added a comment - 2014-12-03 02:12

Daniel Beck added a comment - 2014-12-03 02:12 By design for security reasons, see wiki at https://wiki.jenkins-ci.org/display/JENKINS/Subversion+Plugin Change default of ignoreExternalsOption to true. Add help text explaining some of the security risks involved in checking out externals (namely that they can be a route to hijacking credentials that in most cases have full read access to the entire repository and not just the limited subset of the repository that an individual committer's credentials may have read access to. The recommended way to handle externals is to add those as additional modules directly. Thus ensuring that even if a committers machine is hacked or otherwise compromised, their credentials cannot be used to commit a modified build script and svn:external definition that allows the entire contents of the Subversion repository to be zipped up and FTP'd to a remote server) Since this issue does not argue against the reasons specified there, resolving as Won't Fix. Address those and it would make sense to reopen.