On Wednesday, March 30, 2016 at 3:33:50 PM UTC-4, Jason Hull wrote: > > For instance, I can create a freestyle job with a script step that does > something like: > > echo 'my own key' >> /home/jenkins/.ssh/authorized_keys >
If you have any executors configured on your master, your system is insecure. Set it to zero and use agents exclusively. I can write a pipeline like: > > stage 'Destroy' > 'rm -rf /home/jenkins'.execute > echo 'Bye!' > Will be rejected when the Groovy sandbox option is selected. (If unselected, the script would go into an administrative queue, where you would reject it and presumably punish the offender.) -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/09004787-cd8e-4ce5-8c32-b2597f255bfd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
