Project

General

Profile

Actions
Copy link

Bug #8857

closed

Some Javascript engine fails when accessing system values

Added by Vincent MEMBRÉ over 8 years ago. Updated about 8 years ago.

Status:
Released
Priority:
N/A
Assignee:
François ARMAND
Category:
Architecture - Internal libs
Target version:
3.1.13
Pull Request:
https://github.com/Normation/rudder/p...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

The following tests fails for reason that were not expected:

  • It should fail with a failure containing 'forced interrupted' when accessing file system, but fails with a WrappedException containing a securityException:
     When getting the sandboxed environement\u002C one  should::not be able to access FS with JS(com.normation.rudder.services.policies.TestJsEngine): Failure(sun.org.mozilla.javascript.WrappedException: Wrapped java.lang.SecurityException: access denied to: ("java.io.FilePermission" "/tmp/rudder-test-fromjsengine" "write") (<Unknown source>#1) in <Unknown source> at line number 1,Empty,Empty) is not a Failure whose message matches .*forced interrupted.*
  • It should fail with a failure containing 'forced interrupted' when killing system, but fails with a WrappedException containing a securityException:
      When getting the sandboxed environement\u002C one  should::not be able to kill the system with JS(com.normation.rudder.services.policies.TestJsEngine): Failure(sun.org.mozilla.javascript.WrappedException: Wrapped java.lang.SecurityException: access denied to: ("java.lang.RuntimePermission" "exitVM.0") (<Unknown source>#1) in <Unknown source> at line number 1,Empty,Empty) is not a Failure whose message matches .*forced interrupted.*

Related issues 1 (0 open — 1 closed)

Related to Rudder - User story #8629: Allows generation-time javascript eval in directive parametersReleasedFrançois ARMAND2016-07-28Actions
Actions
Copy link

Also available in: Atom PDF