Slave To Master Access Control | security-144

[Guillaume Karcher]

Hi Guys,

 

I’m Guillaume, part of the QA team of ExpertSystem Group, a software development Company specialized in Semantics / Text Analysis (QA is in charge of the building mechanism here).

 

It’s been a long time now, that we’re still having the exception below at console output of the compilation.

It’s not preventing the build process, but it’s a bit annoying whentrying to follow specific steps like unit tests results.

We’re working with Jenkins 2.19.4, and tryed all the workarounds in the corresponding page (http://jenkins-ci.org/security-144).

I know it’s not the last version, and we planned to upgrade the platform. All the plugins are up to date.

 

The environment is such as :

Master : openSUSE 11.4 (x86_64)

Slave : there is one slave, that is powered off ( it’s an openSUSE 11.4 (x86_64) too )

 

Additionaly, we made the same architecture with 2 windows servers, 2008 R2 x64 (Standard) version, Master + Slave (powered off), and the output is fine (the trace is not present)

 

 

So, maybe there’s something more to do on Linux servers…

Do you think you can help ?

 

 

Thanks a lot for your time and answer.

 

Best Regards

GK

 

 

Here is the trace :

 

[JENKINS] Archiving disabled

java.lang.SecurityException: agent may not stat /home/sqa/dev/CompilCheck-master/com.temis.luxid$IDCClientTools/builds/17408/archive

See http://jenkins-ci.org/security-144 for more details

  at jenkins.SoloFilePathFilter.noFalse(SoloFilePathFilter.java:31)

  at jenkins.SoloFilePathFilter.stat(SoloFilePathFilter.java:67)

  at hudson.FilePath.stating(FilePath.java:2901)

  at hudson.FilePath.access$1400(FilePath.java:195)

  at hudson.FilePath$20.invoke(FilePath.java:1467)

  at hudson.FilePath$20.invoke(FilePath.java:1464)

  at hudson.FilePath$FileCallableWrapper.call(FilePath.java:2772)

  at hudson.remoting.UserRequest.perform(UserRequest.java:153)

  at hudson.remoting.UserRequest.perform(UserRequest.java:50)

  at hudson.remoting.Request$2.run(Request.java:332)

  at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:68)

  at org.jenkinsci.remoting.CallableDecorator.call(CallableDecorator.java:18)

  at hudson.remoting.CallableDecoratorList$1.call(CallableDecoratorList.java:21)

  at jenkins.util.ContextResettingExecutorService$2.call(ContextResettingExecutorService.java:46)

  at java.util.concurrent.FutureTask.run(FutureTask.java:266)

  at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

  at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

  at java.lang.Thread.run(Thread.java:745)

  at ......remote call to channel(Native Method)

  at hudson.remoting.Channel.attachCallSiteStackTrace(Channel.java:1433)

  at hudson.remoting.UserResponse.retrieve(UserRequest.java:253)

  at hudson.remoting.Channel.call(Channel.java:797)

  at hudson.FilePath.act(FilePath.java:1007)

  at hudson.FilePath.act(FilePath.java:996)

  at hudson.FilePath.exists(FilePath.java:1464)

  at org.jenkinsci.plugins.DependencyCheck.maven.MavenArtifactRecorder.postBuild(MavenArtifactRecorder.java:46)

  at hudson.maven.Maven3Builder$MavenExecutionListener.sessionEnded(Maven3Builder.java:460)

  at hudson.maven.Maven3Builder$JenkinsEventSpy.onEvent(Maven3Builder.java:276)

  at org.apache.maven.eventspy.internal.EventSpyDispatcher.onEvent(EventSpyDispatcher.java:104)

  at org.apache.maven.eventspy.internal.EventSpyExecutionListener.sessionEnded(EventSpyExecutionListener.java:61)

  at org.apache.maven.lifecycle.internal.DefaultExecutionEventCatapult.fire(DefaultExecutionEventCatapult.java:64)

  at org.apache.maven.lifecycle.internal.DefaultExecutionEventCatapult.fire(DefaultExecutionEventCatapult.java:42)

  at org.apache.maven.lifecycle.internal.LifecycleStarter.execute(LifecycleStarter.java:137)

  at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:307)

  at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:193)

  at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:106)

  at org.jvnet.hudson.maven3.launcher.Maven33Launcher.main(Maven33Launcher.java:129)

  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

  at java.lang.reflect.Method.invoke(Method.java:498)

  at org.codehaus.plexus.classworlds.launcher.Launcher.launchStandard(Launcher.java:330)

  at org.codehaus.plexus.classworlds.launcher.Launcher.launch(Launcher.java:238)

  at jenkins.maven3.agent.Maven33Main.launch(Maven33Main.java:176)

  at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

  at java.lang.reflect.Method.invoke(Method.java:498)

  at hudson.maven.Maven3Builder.call(Maven3Builder.java:133)

  at hudson.maven.Maven3Builder.call(Maven3Builder.java:68)

  at hudson.remoting.UserRequest.perform(UserRequest.java:153)

  at hudson.remoting.UserRequest.perform(UserRequest.java:50)

  at hudson.remoting.Request$2.run(Request.java:332)

  at hudson.remoting.InterceptingExecutorService$1.call(InterceptingExecutorService.java:68)

  at java.util.concurrent.FutureTask.run(FutureTask.java:266)

  at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

  at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

  at java.lang.Thread.run(Thread.java:745)

 

[Daniel Beck]

> On 29. Aug 2017, at 21:07, Guillaume Karcher <gkar...@expertsystem.com> wrote:
>
> at org.jenkinsci.plugins.DependencyCheck.maven.MavenArtifactRecorder.postBuild(MavenArtifactRecorder.java:46)
>

Probably a bug in this old release of dependency-check-jenkins-plugin, but this particular feature looks like it was removed months ago in 2.0.0, so I doubt anyone will be able to help you here.