[JENKINS-45308] unclassified field java.io.File text

Type: Bug
Resolution: Cannot Reproduce
Priority: Major
Component/s: script-security-plugin
Labels:
None
Environment:
2.60.1

Similar Issues:
Powered by SuggestiMate

Show

We have rather complex build scripts in groovy to deal. After upgrade to 2.60.1 they start fail with:

*14:18:45* ERROR: Build step failed with exception*14:18:45* org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: unclassified field java.io.File text*14:18:45* 	at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.unclassifiedField(SandboxInterceptor.java:367)*14:18:45* 	at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.onSetProperty(SandboxInterceptor.java:217)*14:18:45* 	at org.kohsuke.groovy.sandbox.impl.Checker$5.call(Checker.java:297)*14:18:45* 	at org.kohsuke.groovy.sandbox.impl.Checker.checkedSetProperty(Checker.java:294)*14:18:45* 	at org.kohsuke.groovy.sandbox.impl.Checker$checkedSetProperty$2.callStatic(Unknown Source)*14:18:45* 	at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCallStatic(CallSiteArray.java:56)*14:18:45* 	at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callStatic(AbstractCallSite.java:194)*14:18:45* 	at Script1.run(Script1.groovy:11)*14:18:45* 	at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.GroovySandbox.run(GroovySandbox.java:141)*14:18:45* 	at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript.evaluate(SecureGroovyScript.java:165)*14:18:45* 	at hudson.plugins.groovy.SystemGroovy.run(SystemGroovy.java:95)*14:18:45* 	at hudson.plugins.groovy.SystemGroovy.perform(SystemGroovy.java:59)*14:18:45* 	at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)*14:18:45* 	at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:735)*14:18:45* 	at hudson.model.Build$BuildExecution.build(Build.java:206)*14:18:45* 	at hudson.model.Build$BuildExecution.doRun(Build.java:163)*14:18:45* 	at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:490)*14:18:45* 	at hudson.model.Run.execute(Run.java:1735)*14:18:45* 	at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)*14:18:45* 	at hudson.model.ResourceController.execute(ResourceController.java:97)*14:18:45* 	at hudson.model.Executor.run(Executor.java:405)*14:18:45* Build step 'Execute system Groovy script' marked build as failure

Issues

the 'field java.io.File text' was not offered in /scriptApproval
after being added manually in xml it still failing with the same error (though i can see it in 'Signatures already approved')
Permissive security plugin doesn't help

So, we ended up with completely broken builds without any fallback options.

Job Configuration
Problematic step: Execute system Groovy script + Groovy script file
Code:

final File tmp = File.createTempFile(...)
tmp.text = build.project.workspace.child('somefile').readToString()

- - Sort By Name
  - Sort By Date
  - Ascending
  - Descending
  - Thumbnails
  - List
  - Download All

image-2019-04-15-17-38-56-713.png
66 kB
2019-04-15 14:38
image-2019-04-15-17-38-09-197.png
66 kB
2019-04-15 14:38

links to

PR 131

Alexander Ashitkin created issue - 2017-07-05 09:16

Alexander Ashitkin made changes - 2017-07-05 09:16

Description

Original: We have rather complex build scripts in groovy to deal. After upgrade to 2.60.1 they start fail with:
\{code}
*14:18:45* ERROR: Build step failed with exception*14:18:45* org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: unclassified field java.io.File text*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.unclassifiedField(SandboxInterceptor.java:367)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.onSetProperty(SandboxInterceptor.java:217)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$5.call(Checker.java:297)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker.checkedSetProperty(Checker.java:294)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$checkedSetProperty$2.callStatic(Unknown Source)*14:18:45* at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCallStatic(CallSiteArray.java:56)*14:18:45* at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callStatic(AbstractCallSite.java:194)*14:18:45* at Script1.run(Script1.groovy:11)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.GroovySandbox.run(GroovySandbox.java:141)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript.evaluate(SecureGroovyScript.java:165)*14:18:45* at hudson.plugins.groovy.SystemGroovy.run(SystemGroovy.java:95)*14:18:45* at hudson.plugins.groovy.SystemGroovy.perform(SystemGroovy.java:59)*14:18:45* at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:735)*14:18:45* at hudson.model.Build$BuildExecution.build(Build.java:206)*14:18:45* at hudson.model.Build$BuildExecution.doRun(Build.java:163)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:490)*14:18:45* at hudson.model.Run.execute(Run.java:1735)*14:18:45* at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)*14:18:45* at hudson.model.ResourceController.execute(ResourceController.java:97)*14:18:45* at hudson.model.Executor.run(Executor.java:405)*14:18:45* Build step 'Execute system Groovy script' marked build as failure
\{code}

Issues:
# the 'field java.io.File text' was not offered in /scriptApproval
# after being added manually in xml it still failing with the same error (though i can see it in 'Signatures already approved')
# Permissive security plugin doesn't help

So, we ended up with completely broken builds without any fallback options.

Job Configuration
Problematic step: Execute system Groovy script + Groovy script file
Code:
{code}
final File tmp = File.createTempFile(...)
tmp.text = build.project.workspace.child('somefile').readToString()
{code}

New: We have rather complex build scripts in groovy to deal. After upgrade to 2.60.1 they start fail with:
{code}
*14:18:45* ERROR: Build step failed with exception*14:18:45* org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: unclassified field java.io.File text*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.unclassifiedField(SandboxInterceptor.java:367)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.onSetProperty(SandboxInterceptor.java:217)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$5.call(Checker.java:297)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker.checkedSetProperty(Checker.java:294)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$checkedSetProperty$2.callStatic(Unknown Source)*14:18:45* at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCallStatic(CallSiteArray.java:56)*14:18:45* at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callStatic(AbstractCallSite.java:194)*14:18:45* at Script1.run(Script1.groovy:11)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.GroovySandbox.run(GroovySandbox.java:141)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript.evaluate(SecureGroovyScript.java:165)*14:18:45* at hudson.plugins.groovy.SystemGroovy.run(SystemGroovy.java:95)*14:18:45* at hudson.plugins.groovy.SystemGroovy.perform(SystemGroovy.java:59)*14:18:45* at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:735)*14:18:45* at hudson.model.Build$BuildExecution.build(Build.java:206)*14:18:45* at hudson.model.Build$BuildExecution.doRun(Build.java:163)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:490)*14:18:45* at hudson.model.Run.execute(Run.java:1735)*14:18:45* at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)*14:18:45* at hudson.model.ResourceController.execute(ResourceController.java:97)*14:18:45* at hudson.model.Executor.run(Executor.java:405)*14:18:45* Build step 'Execute system Groovy script' marked build as failure
{code}

Issues:
# the 'field java.io.File text' was not offered in /scriptApproval
# after being added manually in xml it still failing with the same error (though i can see it in 'Signatures already approved')
# Permissive security plugin doesn't help

So, we ended up with completely broken builds without any fallback options.

Job Configuration
Problematic step: Execute system Groovy script + Groovy script file
Code:
{code}
final File tmp = File.createTempFile(...)
tmp.text = build.project.workspace.child('somefile').readToString()
{code}

Alexander Ashitkin made changes - 2017-07-05 09:18

Description

Original: We have rather complex build scripts in groovy to deal. After upgrade to 2.60.1 they start fail with:
{code}
*14:18:45* ERROR: Build step failed with exception*14:18:45* org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: unclassified field java.io.File text*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.unclassifiedField(SandboxInterceptor.java:367)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.onSetProperty(SandboxInterceptor.java:217)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$5.call(Checker.java:297)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker.checkedSetProperty(Checker.java:294)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$checkedSetProperty$2.callStatic(Unknown Source)*14:18:45* at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCallStatic(CallSiteArray.java:56)*14:18:45* at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callStatic(AbstractCallSite.java:194)*14:18:45* at Script1.run(Script1.groovy:11)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.GroovySandbox.run(GroovySandbox.java:141)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript.evaluate(SecureGroovyScript.java:165)*14:18:45* at hudson.plugins.groovy.SystemGroovy.run(SystemGroovy.java:95)*14:18:45* at hudson.plugins.groovy.SystemGroovy.perform(SystemGroovy.java:59)*14:18:45* at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:735)*14:18:45* at hudson.model.Build$BuildExecution.build(Build.java:206)*14:18:45* at hudson.model.Build$BuildExecution.doRun(Build.java:163)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:490)*14:18:45* at hudson.model.Run.execute(Run.java:1735)*14:18:45* at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)*14:18:45* at hudson.model.ResourceController.execute(ResourceController.java:97)*14:18:45* at hudson.model.Executor.run(Executor.java:405)*14:18:45* Build step 'Execute system Groovy script' marked build as failure
{code}

Issues:
# the 'field java.io.File text' was not offered in /scriptApproval
# after being added manually in xml it still failing with the same error (though i can see it in 'Signatures already approved')
# Permissive security plugin doesn't help

So, we ended up with completely broken builds without any fallback options.

Job Configuration
Problematic step: Execute system Groovy script + Groovy script file
Code:
{code}
final File tmp = File.createTempFile(...)
tmp.text = build.project.workspace.child('somefile').readToString()
{code}

New: We have rather complex build scripts in groovy to deal. After upgrade to 2.60.1 they start fail with:
{code}
*14:18:45* ERROR: Build step failed with exception*14:18:45* org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: unclassified field java.io.File text*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.unclassifiedField(SandboxInterceptor.java:367)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.onSetProperty(SandboxInterceptor.java:217)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$5.call(Checker.java:297)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker.checkedSetProperty(Checker.java:294)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$checkedSetProperty$2.callStatic(Unknown Source)*14:18:45* at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCallStatic(CallSiteArray.java:56)*14:18:45* at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callStatic(AbstractCallSite.java:194)*14:18:45* at Script1.run(Script1.groovy:11)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.GroovySandbox.run(GroovySandbox.java:141)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript.evaluate(SecureGroovyScript.java:165)*14:18:45* at hudson.plugins.groovy.SystemGroovy.run(SystemGroovy.java:95)*14:18:45* at hudson.plugins.groovy.SystemGroovy.perform(SystemGroovy.java:59)*14:18:45* at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:735)*14:18:45* at hudson.model.Build$BuildExecution.build(Build.java:206)*14:18:45* at hudson.model.Build$BuildExecution.doRun(Build.java:163)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:490)*14:18:45* at hudson.model.Run.execute(Run.java:1735)*14:18:45* at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)*14:18:45* at hudson.model.ResourceController.execute(ResourceController.java:97)*14:18:45* at hudson.model.Executor.run(Executor.java:405)*14:18:45* Build step 'Execute system Groovy script' marked build as failure
{code}

Issues
# the 'field java.io.File text' was not offered in /scriptApproval
# after being added manually in xml it still failing with the same error (though i can see it in 'Signatures already approved')
# Permissive security plugin doesn't help

So, we ended up with completely broken builds without any fallback options.

Job Configuration
Problematic step: Execute system Groovy script + Groovy script file
Code:
{code}
final File tmp = File.createTempFile(...)
tmp.text = build.project.workspace.child('somefile').readToString()
{code}

Alexander Ashitkin made changes - 2017-07-05 09:18

Description

Original: We have rather complex build scripts in groovy to deal. After upgrade to 2.60.1 they start fail with:
{code}
*14:18:45* ERROR: Build step failed with exception*14:18:45* org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: unclassified field java.io.File text*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.unclassifiedField(SandboxInterceptor.java:367)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.onSetProperty(SandboxInterceptor.java:217)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$5.call(Checker.java:297)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker.checkedSetProperty(Checker.java:294)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$checkedSetProperty$2.callStatic(Unknown Source)*14:18:45* at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCallStatic(CallSiteArray.java:56)*14:18:45* at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callStatic(AbstractCallSite.java:194)*14:18:45* at Script1.run(Script1.groovy:11)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.GroovySandbox.run(GroovySandbox.java:141)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript.evaluate(SecureGroovyScript.java:165)*14:18:45* at hudson.plugins.groovy.SystemGroovy.run(SystemGroovy.java:95)*14:18:45* at hudson.plugins.groovy.SystemGroovy.perform(SystemGroovy.java:59)*14:18:45* at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:735)*14:18:45* at hudson.model.Build$BuildExecution.build(Build.java:206)*14:18:45* at hudson.model.Build$BuildExecution.doRun(Build.java:163)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:490)*14:18:45* at hudson.model.Run.execute(Run.java:1735)*14:18:45* at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)*14:18:45* at hudson.model.ResourceController.execute(ResourceController.java:97)*14:18:45* at hudson.model.Executor.run(Executor.java:405)*14:18:45* Build step 'Execute system Groovy script' marked build as failure
{code}

Issues
# the 'field java.io.File text' was not offered in /scriptApproval
# after being added manually in xml it still failing with the same error (though i can see it in 'Signatures already approved')
# Permissive security plugin doesn't help

So, we ended up with completely broken builds without any fallback options.

Job Configuration
Problematic step: Execute system Groovy script + Groovy script file
Code:
{code}
final File tmp = File.createTempFile(...)
tmp.text = build.project.workspace.child('somefile').readToString()
{code}

New: We have rather complex build scripts in groovy to deal. After upgrade to 2.60.1 they start fail with:
{code}
*14:18:45* ERROR: Build step failed with exception*14:18:45* org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: unclassified field java.io.File text*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.unclassifiedField(SandboxInterceptor.java:367)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SandboxInterceptor.onSetProperty(SandboxInterceptor.java:217)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$5.call(Checker.java:297)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker.checkedSetProperty(Checker.java:294)*14:18:45* at org.kohsuke.groovy.sandbox.impl.Checker$checkedSetProperty$2.callStatic(Unknown Source)*14:18:45* at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCallStatic(CallSiteArray.java:56)*14:18:45* at org.codehaus.groovy.runtime.callsite.AbstractCallSite.callStatic(AbstractCallSite.java:194)*14:18:45* at Script1.run(Script1.groovy:11)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.GroovySandbox.run(GroovySandbox.java:141)*14:18:45* at org.jenkinsci.plugins.scriptsecurity.sandbox.groovy.SecureGroovyScript.evaluate(SecureGroovyScript.java:165)*14:18:45* at hudson.plugins.groovy.SystemGroovy.run(SystemGroovy.java:95)*14:18:45* at hudson.plugins.groovy.SystemGroovy.perform(SystemGroovy.java:59)*14:18:45* at hudson.tasks.BuildStepMonitor$1.perform(BuildStepMonitor.java:20)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:735)*14:18:45* at hudson.model.Build$BuildExecution.build(Build.java:206)*14:18:45* at hudson.model.Build$BuildExecution.doRun(Build.java:163)*14:18:45* at hudson.model.AbstractBuild$AbstractBuildExecution.run(AbstractBuild.java:490)*14:18:45* at hudson.model.Run.execute(Run.java:1735)*14:18:45* at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43)*14:18:45* at hudson.model.ResourceController.execute(ResourceController.java:97)*14:18:45* at hudson.model.Executor.run(Executor.java:405)*14:18:45* Build step 'Execute system Groovy script' marked build as failure
{code}

Issues
# the 'field java.io.File text' was not offered in /scriptApproval
# after being added manually in xml it still failing with the same error (though i can see it in 'Signatures already approved')
# Permissive security plugin doesn't help

So, we ended up with completely broken builds without any fallback options.

Job Configuration
Problematic step: Execute system Groovy script + Groovy script file
Code:
{code}
final File tmp = File.createTempFile(...)
tmp.text = build.project.workspace.child('somefile').readToString()
{code}

Jesse Glick made changes - 2017-07-11 15:19

Remote Link

New: This issue links to "PR 131 (Web Link)" [ 17236 ]

Jesse Glick made changes - 2017-07-11 17:43

Summary

Original: Groovy build script (file) rejected by Script Security

New: unclassified field java.io.File text

Denis Andreev made changes - 2019-04-15 14:38

Attachment

New: image-2019-04-15-17-38-09-197.png [ 46723 ]

Denis Andreev made changes - 2019-04-15 14:40

Attachment

New: image-2019-04-15-17-38-56-713.png [ 46724 ]

Jesse Glick made changes - 2019-04-15 14:44

Resolution		New: Cannot Reproduce [ 5 ]
Status	Original: Open [ 1 ]	New: Resolved [ 5 ]

Assignee:: Unassigned

Reporter:: Alexander Ashitkin

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2017-07-05 09:16

Updated:: 2019-04-16 17:48

Resolved:: 2019-04-15 14:44

Jenkins

Details

Description

Attachments

Attachments

Issue Links

Activity

People

Dates