Hi!

How do I protect Jenkins from its own jobs and pipelines?

For instance, I can create a freestyle job with a script step that does 
something like:

echo 'my own key' >> /home/jenkins/.ssh/authorized_keys

Also, I can write a pipeline like:

stage 'Destroy'
'rm -rf /home/jenkins'.execute
echo 'Bye!'

How to I prevent these types of malicious activities?

Thanks!!
Jason

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/79631bf6-a4fc-4a6e-9ac1-b3b332e70d17%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to