Reputation: 1120
I'm working on some jenkins pipeline scripted code and keep hitting things that are sandboxed, or at least I think they're sandboxed.
I'm trying to track down a list of what is sandboxed in the Jenkins / Groovy playground. So far my searches aren't finding anything useful.
Does anyone know where I can find a list of what stuff would require an admin approval to run?
Upvotes: 9
Views: 4719
Reputation: 47259
Whitelisting/blacklisting is part of the Script Security Plugin. There are extension points that allow other plugins to build and customize the script whitelist, as well. The general built-in signatures can be seen in these files:
src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/blacklist
src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/generic-whitelist
src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/jenkins-whitelist
Upvotes: 7