Add scriptApproval.xml

Change-Id: I1cf87c402f7e58423320b8da2b32f9b80bbc2cf2

diff --git a/debian/jenkins-scripts-groovyinit.install b/debian/jenkins-scripts-groovyinit.install
index 4580f69..9d84c28 100644 (file)
--- a/debian/jenkins-scripts-groovyinit.install
+++ b/debian/jenkins-scripts-groovyinit.install
@@ -1 +1,2 @@
 debian/tmp/groovy_init_scripts/* /var/lib/jenkins/init.groovy.d/
+debian/tmp/groovy_init_scripts/scriptApproval.xml /var/lib/jenkins/

diff --git a/groovy_init_scripts/scriptApproval.xml b/groovy_init_scripts/scriptApproval.xml
new file mode 100644 (file)
index 0000000..415d3dd
--- /dev/null
+++ b/groovy_init_scripts/scriptApproval.xml
@@ -0,0 +1,173 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<scriptApproval plugin="script-security@1.28">
+  <approvedScriptHashes>
+    <string>00315d1153ba70517c738d532401750adb18daaf</string>
+    <string>017d0db438428731cd600b6ebda805065433520f</string>
+    <string>0409ab5292bfffd2d1baa381a2c1080ef9c277a2</string>
+    <string>05477fbaff453d4eb3045f2039d1b586a24ee631</string>
+    <string>0bc5dcb90964741115308f13c042998b6bbfbc66</string>
+    <string>0d3674cfaee34604a98aa6375a979e4bef3077ef</string>
+    <string>1a82acd5437b3c3aef5a000285178fc408c3c0c2</string>
+    <string>1ac9db42ad5c4b6b6ccd110bd83605d3554ce88b</string>
+    <string>1b6ee1e9ec250e65df3f124a6b10a9c745d06476</string>
+    <string>1bbf8aee9d5da6972564a4d923f5c5910a0c7cb7</string>
+    <string>1d77669ccac0b2c08f9bee43daac4b4a94e07fb9</string>
+    <string>2106e0b7eb4d561e1f5bcf051a7b31a9685796ab</string>
+    <string>216d450d99f23770b5154e0dd45d35df3d6e0ab8</string>
+    <string>26f44e9a8af8ccd9910e930c5d1e4e87a01f25b4</string>
+    <string>2731d1f0f88c15d8809101187da1625d7cd24f58</string>
+    <string>29becdf919ee25f916d25a5daec4da436606cd4f</string>
+    <string>2b79f61a09c151493617b75a0b9408947cefcaf3</string>
+    <string>2e7251e3f5b2236d842994720f6769528135312d</string>
+    <string>2ed34917927e5af323c645c90f9be85d1c44517d</string>
+    <string>32c9e3fa097fa7f0055750a44cebc64d534dc111</string>
+    <string>3587988807a6fe4160fc7370e4d3b46e494bb35f</string>
+    <string>3a012e0fadd095372e77b0655aa765f9409455f8</string>
+    <string>3e86b636ead9f2cf44bf40e2895ab9c6c264e6e8</string>
+    <string>3f100c8286accfe769631f7f8cd808280bf2c8df</string>
+    <string>414e4bf34a1625092a9325bed89514e27ed273f7</string>
+    <string>41f625d2ada65ec502cde8080738ded7a35020e0</string>
+    <string>424987980c85dea0007788379e1ce7d49cb07fdd</string>
+    <string>437ee2eb4e1f590b175facbad4394607bc15b1c1</string>
+    <string>4767c0c76396751e50b6abecd8e03a7c8d440ca3</string>
+    <string>4e283a5c48817178ffae24a547dda672870a2c38</string>
+    <string>4f6d925a3136fc4cc49e0f5fb3f8dce839f2e1e5</string>
+    <string>50f9fd9924630d7ea65598d2fd4e033b348ca222</string>
+    <string>53ef9694505b6e77c41c053f6705fd2a98551f19</string>
+    <string>5606a923993c9286637839d1f7644e62a6448911</string>
+    <string>577be6db4995b509b1cb64ce8d4bee846f866b26</string>
+    <string>5c577e8bcd8fb6ce138d934e346f549cad5192bd</string>
+    <string>5e2f81d1ef933d23aa6cbd673f9ea56fc4468387</string>
+    <string>6d8a18aba007598a7901495cfffcf08865883633</string>
+    <string>6e55cef58086f2adc3e9976836bbdf920b6648b2</string>
+    <string>6f752d0538cfd87584216b82cf31f3bb796740f2</string>
+    <string>6f9b2b76bc0ec61825a9480c6e52b5d1cbbceffb</string>
+    <string>7a52ba91799cb22a82f442011f2bdf6f7898264f</string>
+    <string>7d581316af66034919a152e9014b8b0a69657e6e</string>
+    <string>7d5ae9a876a71918f07edc15742ec5c01d9193ed</string>
+    <string>7f9dd3bb442e5ac921535b98e4170f48f06901f3</string>
+    <string>85aec29c6dd85c3a72435a1e4aaa85fef7805a22</string>
+    <string>88e6f9c2fb68fd50617a6f038da02bb2735a343f</string>
+    <string>8acf4be14ab31b3a9a9f08d448b5e7e87a973bf6</string>
+    <string>8cdb455146cce59033173a6c269bc396f9b981f9</string>
+    <string>8f55d4f32226edf90e29cdbece0c0aaa7e1636ec</string>
+    <string>92318df17b760e3dd8e8446dde7a9ef7ea92a41b</string>
+    <string>931836c0b5555ab3399a5b64c68e04bc86186f9f</string>
+    <string>93b2188439cc18091839439e9650d09e3c6dca4c</string>
+    <string>94b94d0126370f5024b3d51b99b838f363afe3ee</string>
+    <string>9897016720cecc6b36292cae818d8036d7f86aa7</string>
+    <string>9a2a336769f722b4adf971a33365f364df488a77</string>
+    <string>9f134a90d7d6d8378edde42fe51ede40025dd760</string>
+    <string>a07ed3ae9dcbef9476b642fc630d77ea57a24b30</string>
+    <string>a0e41e886decfb19eae61221d4402798be95e68e</string>
+    <string>a822c49f1bc711ae2f7c2b6db6a36d67206d6afb</string>
+    <string>a83f0569a7722bca5897f5c6ccafa3814026a8f9</string>
+    <string>ac72e4e077ba06d6e4279314fd0c237df37be248</string>
+    <string>b5ac3e66f309dd83d0fb250e7b90b34644852e75</string>
+    <string>b6013706571921d7bf30bde6c3f995c637206241</string>
+    <string>b63100fdc3f59e323f619076d54d4857e2f3d699</string>
+    <string>b6a14200ede3b94a13f4c78d0c22a869e030d4cb</string>
+    <string>b6ac468d730e1dd4480df1c119128572b88b9715</string>
+    <string>b97a6b261a418c7aaf2870d4a48685d05aace2f9</string>
+    <string>b9f574f7dd733cc0feaa8e7e47506a2d1784ed2f</string>
+    <string>bac7b98bc382f44877365f66ed88a1ff607dab9a</string>
+    <string>bcdfe4a785243ea7a616dcb00e7ac8ebcffcee5c</string>
+    <string>bcf6fc6555773840e750b58fcd968f4d049a9d97</string>
+    <string>be86cb64d649de544254711e679f45415aa4d262</string>
+    <string>c07d47407bdb1dfc0be260ed5f222a30d702cd9e</string>
+    <string>c61d474e71053ea9a38c199db5e123932e28f2e5</string>
+    <string>c76438ce9a8c9b1b8f1d00d796d10a950cd2a1c7</string>
+    <string>c904aab72156ef4781684af77ca12dd7fdff5018</string>
+    <string>c9d95f8f0ff2eb685e76e58e625f1c198b1c4a40</string>
+    <string>d1aebf21faac4e281cb4969ef31753ac233f69aa</string>
+    <string>d25e531e05092df7148ed951fdc4e4cfec1bbf74</string>
+    <string>d51b4c1581da7dafd9f017fac2525d5ea981b4d3</string>
+    <string>d9301af7b4c57b4839d6b1e1336e64eead3e6598</string>
+    <string>daa2760c44e0032c265cdf871297e4d8ad18574b</string>
+    <string>db025401003db2ceefc645cae6b92c2a703604f7</string>
+    <string>db0a075c61f76814966a63c35979a334b01824e0</string>
+    <string>dc8198b96a95ffb0a90ac4e631ae907d65a1a52b</string>
+    <string>dcc7f31b1116b106292de23206b686d5aac5e831</string>
+    <string>e103109d14aa9be702886655819cf399b15107c9</string>
+    <string>e4489051d5cf6a87b5e2fa689b6be7c80627fd96</string>
+    <string>e72b04faa5b54bd29d51cb0429add79c35b5376e</string>
+    <string>eab6c692f95f3bf4b0d4c9de6ece4115fb19f5e5</string>
+    <string>f5caaec7f3301760167dffbb8ef62e142b4d2fb2</string>
+    <string>f8bf66f50b9923da8ac1c9e661eddb61c0b49ce7</string>
+  </approvedScriptHashes>
+  <approvedSignatures>
+    <string>field hudson.model.Queue$Item task</string>
+    <string>method groovy.lang.GroovyObject getProperty java.lang.String</string>
+    <string>method groovy.lang.GroovyObject invokeMethod java.lang.String java.lang.Object</string>
+    <string>method groovy.lang.GroovyObject setProperty java.lang.String java.lang.Object</string>
+    <string>method groovy.lang.Script evaluate java.io.File</string>
+    <string>method groovy.lang.Script print java.lang.Object</string>
+    <string>method groovy.lang.Script println java.lang.Object</string>
+    <string>method hudson.model.AbstractCIBase getQueue</string>
+    <string>method hudson.model.Computer countBusy</string>
+    <string>method hudson.model.Computer countExecutors</string>
+    <string>method hudson.model.Computer countIdle</string>
+    <string>method hudson.model.Computer disconnect hudson.slaves.OfflineCause</string>
+    <string>method hudson.model.Computer doDoDelete</string>
+    <string>method hudson.model.Computer getIdleStartMilliseconds</string>
+    <string>method hudson.model.Computer getName</string>
+    <string>method hudson.model.Computer isAlive</string>
+    <string>method hudson.model.Computer isOffline</string>
+    <string>method hudson.model.Computer setTemporarilyOffline boolean hudson.slaves.OfflineCause</string>
+    <string>method hudson.model.Hudson getSlaves</string>
+    <string>method hudson.model.Item getName</string>
+    <string>method hudson.model.ItemGroup getItem java.lang.String</string>
+    <string>method hudson.model.Job isBuilding</string>
+    <string>method hudson.model.Job isInQueue</string>
+    <string>method hudson.model.Queue getItems</string>
+    <string>method hudson.model.Queue$Item getId</string>
+    <string>method hudson.model.Run getEnvironment hudson.model.TaskListener</string>
+    <string>method hudson.model.Saveable save</string>
+    <string>method hudson.model.Slave getComputer</string>
+    <string>method hudson.model.Slave getLauncher</string>
+    <string>method hudson.plugins.sshslaves.SSHLauncher getHost</string>
+    <string>method java.lang.Class getClassLoader</string>
+    <string>method java.lang.Class newInstance</string>
+    <string>method java.lang.Process waitFor</string>
+    <string>method java.lang.String getBytes</string>
+    <string>method java.lang.Thread join</string>
+    <string>method java.lang.Thread start</string>
+    <string>method java.util.Collection remove java.lang.Object</string>
+    <string>method java.util.Dictionary get java.lang.Object</string>
+    <string>method java.util.Properties load java.io.InputStream</string>
+    <string>new java.io.File java.lang.String</string>
+    <string>new java.io.File java.lang.String java.lang.String</string>
+    <string>new java.io.FileInputStream java.lang.String</string>
+    <string>new java.lang.StringBuffer</string>
+    <string>new java.lang.Thread java.lang.Runnable</string>
+    <string>new java.util.Properties</string>
+    <string>staticMethod hudson.model.Hudson getInstance</string>
+    <string>staticMethod java.lang.Class forName java.lang.String boolean java.lang.ClassLoader</string>
+    <string>staticMethod java.lang.Math ceil double</string>
+    <string>staticMethod java.lang.Math min int int</string>
+    <string>staticMethod java.lang.String format java.lang.String java.lang.Object[]</string>
+    <string>staticMethod java.lang.System getProperty java.lang.String</string>
+    <string>staticMethod java.lang.System getenv java.lang.String</string>
+    <string>staticMethod jenkins.model.Jenkins getInstance</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods append java.io.File java.lang.Object</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods execute java.lang.String</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods find java.lang.Object groovy.lang.Closure</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods find java.util.Collection groovy.lang.Closure</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods getText java.io.File</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods hasProperty java.lang.Object java.lang.String</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods isCase java.lang.Object java.lang.Object</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods isCase java.util.Map java.lang.Object</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods minus java.util.Set java.lang.Iterable</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods minus java.util.Set java.lang.Object</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods minus java.util.Set java.util.Collection</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods println groovy.lang.Closure java.lang.Object</string>
+    <string>staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods unique java.util.Collection groovy.lang.Closure</string>
+    <string>staticMethod org.codehaus.groovy.runtime.EncodingGroovyMethods encodeBase64 byte[]</string>
+    <string>staticMethod org.codehaus.groovy.runtime.ProcessGroovyMethods consumeProcessOutput java.lang.Process java.lang.Appendable java.lang.Appendable</string>
+  </approvedSignatures>
+  <aclApprovedSignatures/>
+  <approvedClasspathEntries/>
+  <pendingScripts/>
+  <pendingSignatures/>
+  <pendingClasspathEntries/>
+</scriptApproval>

diff --git a/packaging/jenkins-scripts.spec b/packaging/jenkins-scripts.spec
index c8b14f6..05a79cd 100644 (file)
--- a/packaging/jenkins-scripts.spec
+++ b/packaging/jenkins-scripts.spec
@@ -327,6 +327,7 @@ fi
 %{destinitdir}/Module_Node
 %{destinitdir}/Module_RabbitmqConsumer
 %{destinitdir}/Module_SshCredentials
+%{destinitdir}/scriptApproval.xml
 
 %files submitobs
 %defattr(-,jenkins,jenkins)