953fcaf25c
Update to the latest version of the script:
3b8e932110/cli-shutdown.groovy
Change-Id: Ief950cffb24229aea8cbcabf62d3339aca6c9630
48 lines
1.8 KiB
Groovy
48 lines
1.8 KiB
Groovy
/*
|
|
=======================================================================
|
|
Taken directly from https://github.com/jenkinsci-cert/SECURITY-218
|
|
See https://jenkins-ci.org/content
|
|
/mitigating-unauthenticated-remote-code-execution-0-day-jenkins-cli
|
|
=======================================================================
|
|
|
|
The MIT License
|
|
|
|
Copyright (c) 2015, Kohsuke Kawaguchi
|
|
|
|
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
of this software and associated documentation files (the "Software"), to deal
|
|
in the Software without restriction, including without limitation the rights
|
|
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
copies of the Software, and to permit persons to whom the Software is
|
|
furnished to do so, subject to the following conditions:
|
|
|
|
The above copyright notice and this permission notice shall be included in
|
|
all copies or substantial portions of the Software.
|
|
|
|
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
THE SOFTWARE.
|
|
*/
|
|
|
|
import jenkins.*;
|
|
import jenkins.model.*;
|
|
import hudson.model.*;
|
|
|
|
// disabled CLI access over TCP listener (separate port)
|
|
def p = AgentProtocol.all()
|
|
p.each { x ->
|
|
if (x.name.contains("CLI")) p.remove(x)
|
|
}
|
|
|
|
// disable CLI access over /cli URL
|
|
def removal = { lst ->
|
|
lst.each { x -> if (x.getClass().name.contains("CLIAction")) lst.remove(x) }
|
|
}
|
|
def j = Jenkins.instance;
|
|
removal(j.getExtensionList(RootAction.class))
|
|
removal(j.actions)
|