[JIRA] [core] (JENKINS-27055) Slave To Master Access Control needs updating for JENKINS_HOME layout change

Fri, 20 Feb 2015 07:54:06 -0800

mwebber commented on Bug JENKINS-27055

The reason I think that there is an issue here, is that ${JENKINS_HOME}/secrets/filepath-filters.d/30-default.conf contains the following:

# Various plugins read/write files under build directories, so allow them all.
# - git 1.x writes changelog.xml from the slave (2.x writes from the master so need not be listed)
# - analysis-core and plugins based on it write reports to workspace-files/
# - cobertura writes coverage.xml
# - violations writes violations.xml and other content under violations/
# - dependency-check writes archive/artifacts.txt
# But not allowing deletion to prevent data loss and symlink to prevent jailbreaking.
allow create,mkdirs,read,stat,write <BUILDDIR>/.+



But, it's not working for me in Jenkins 1.597+ (see JENKINS-27053) - I get

slave may not mkdirs /exports/jenkins_home/jobs/Controls_TopUp_unittests/builds/439/violations



Is <BUILDDIR>/.+ correct in newer Jenkins?



I got the violations plugin to work by adding file secrets/filepath-filters.d/50-gui.conf containing this:




allow create,mkdirs,read,stat,write <JENKINS_HOME>/jobs/.*
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators.
For more information on JIRA, see: http://www.atlassian.com/software/jira

--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to