Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-57171

Permissive script security plugin is broken after updating to script security 1.58

XMLWordPrintable

    • 0.5

      After updating to Script Security 1.58 permissive script security no longer permits unsafe method calls.  I have -Dpermissive-script-security.enabled=no_security set up in the java args, and before upgrading to 1.58 I was receiving no warnings/errors when calling unsafe methods as expected. After upgrading I see many warnings in my pipeline log, such as:

      Scripts not permitted to use staticMethod org.jenkinsci.plugins.workflow.cps.Safepoint safepoint. Administrators can decide whether to approve or reject this signature.

       

        1. scriptApproval.xml
          5 kB
        2. example.JPG
          example.JPG
          234 kB

          [JENKINS-57171] Permissive script security plugin is broken after updating to script security 1.58

          Gabriel Loewen created issue -
          Gabriel Loewen made changes -
          Description Original: After updating to Script Security 1.58 permissive script security no longer permits unsafe method calls.  I have *-Dpermissive-script-security.enabled=no_security* set up in the java args, and before upgrading to 1.58 I was receiving no warnings/errors when calling unsafe methods.  After upgrading I see many warnings in my pipeline log, such as:

          Scripts not permitted to use staticMethod org.jenkinsci.plugins.workflow.cps.Safepoint safepoint. Administrators can decide whether to approve or reject this signature.

                      		New: After updating to Script Security 1.58 permissive script security no longer permits unsafe method calls.  I have *-Dpermissive-script-security.enabled=no_security* set up in the java args, and before upgrading to 1.58 I was receiving no warnings/errors when calling unsafe methods as expected. After upgrading I see many warnings in my pipeline log, such as:

          Scripts not permitted to use staticMethod org.jenkinsci.plugins.workflow.cps.Safepoint safepoint. Administrators can decide whether to approve or reject this signature.

           
          Brian Ray made changes -
          Component/s New: workflow-cps-plugin [ 21713 ]
          Brian Ray made changes -
          Environment Original: Jenkins 2.164.2
          Script Security 1.58
          Permissive Script Security 0.3           		New: Jenkins 2.164.2
          Script Security 1.58
          Permissive Script Security 0.3
          Pipeline: Groovy 2.67
          Brian Ray made changes -
          Link New: This issue is caused by JENKINS-34973 [ JENKINS-34973 ]
          Oliver Gondža made changes -
          Status Original: Open [ 1 ] New: In Progress [ 3 ]
          Oliver Gondža made changes -
          Status Original: In Progress [ 3 ] New: In Review [ 10005 ]
          Oliver Gondža made changes -
          Released As New: 0.4
          Resolution New: Fixed [ 1 ]
          Status Original: In Review [ 10005 ] New: Resolved [ 5 ]
          Andrea Lai made changes -
          Attachment New: example.JPG [ 47200 ]
          Andrea Lai made changes -
          Attachment New: scriptApproval.xml [ 47203 ]
          Andrea Lai made changes -
          Resolution Original: Fixed [ 1 ]
          Status Original: Resolved [ 5 ] New: Reopened [ 4 ]

            olivergondza Oliver Gondža
            gabloe Gabriel Loewen
            Votes:
            9 Vote for this issue
            Watchers:
            18 Start watching this issue

              Created:
              Updated:
              Resolved: