Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-47393

Split CommandLauncher into a plugin and integrate with script-security

    Details

    • Similar Issues:

      Description

      As of Jenkins Security Advisory 2017-10-11 CommandLauncher configuration enforces RUN_SCRIPTS, which is awkward for cases where a lower-privileged user is permitted to configure other aspects of an agent. The launcher should be moved out of core into a plugin that can depend on script-security for a regular approval workflow.

        Attachments

          Issue Links

            Activity

            jglick Jesse Glick created issue -
            jglick Jesse Glick made changes -
            Field Original Value New Value
            Link This issue relates to SECURITY-478 [ SECURITY-478 ]
            jglick Jesse Glick made changes -
            Labels security ux security split-plugins-from-core ux
            jglick Jesse Glick made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            jglick Jesse Glick made changes -
            Remote Link This issue links to "core PR 3076 (Web Link)" [ 17851 ]
            jglick Jesse Glick made changes -
            Remote Link This issue links to "jenkins-test-harness PR 79 (Web Link)" [ 17852 ]
            jglick Jesse Glick made changes -
            Status In Progress [ 3 ] In Review [ 10005 ]
            jglick Jesse Glick made changes -
            Link This issue depends on HOSTING-442 [ HOSTING-442 ]
            jglick Jesse Glick made changes -
            Status In Review [ 10005 ] Resolved [ 5 ]
            Resolution Fixed [ 1 ]
            jglick Jesse Glick made changes -
            Link This issue depends on JENKINS-47593 [ JENKINS-47593 ]
            jamesdumay James Dumay made changes -
            Remote Link This issue links to "CloudBees Internal OSS-2247 (Web Link)" [ 18374 ]

              People

              • Assignee:
                jglick Jesse Glick
                Reporter:
                jglick Jesse Glick
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: