Skip to main content



      Home
Home » Archived » Hudson » Changing PWD in a Builder
Changing PWD in a Builder [message #1690956] Wed, 01 April 2015 05:45 Go to next message
Eclipse UserFriend
I am now planning to implement a feature in a Builder plugin to change the working directory to a subdirectory of the workspace before launching a command. Does Launcher.ProcStarter.pwd allow going out of the workspace by using ".." or an absolute path?

If so, I must implement some protection measure not to go out of the workspace by malicious job configurations. Is there any method in Hudson that I can use to check a path is inside the workspace?

[Updated on: Wed, 01 April 2015 05:46] by Moderator

Re: Changing PWD in a Builder [message #1691014 is a reply to message #1690956] Wed, 01 April 2015 11:12 Go to previous messageGo to next message
Eclipse UserFriend
There are two security envelop

- Envelop for the user working on the Client side (UI)
- Envelop for the execution environment

The former envelop is strictly sandboxed to be with in the Hudson home. But the second envelop is open with in the execution machine restricted only by the user credentials with which Hudson itself is running or the machine in which the slave agent is running,

Re: Changing PWD in a Builder [message #1691675 is a reply to message #1691014] Wed, 08 April 2015 21:26 Go to previous message
Eclipse UserFriend
If so, is there any answer to the second question? I would like only to allow chdir into a subdirectory of the workspace. Since FilePath may represent remote path, absolute path checking is not so easy IMO, especially on Windows nodes.
Previous Topic:Ignore failures of some configurations in a matrix project?
Next Topic:Deploy from Hudson-ci server to remote windows server
Goto Forum:
  


Current Time: Wed Jul 23 05:06:21 EDT 2025

Powered by FUDForum. Page generated in 0.08202 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top