5ae25f004a
The raw module had not been restricted to remote nodes so jobs could run arbitrary code on the executor. Change-Id: I1b37eac65ef59ca749f55117a678c38969e86ead
6 lines
159 B
YAML
6 lines
159 B
YAML
---
|
|
security:
|
|
- |
|
|
The raw module had not been blocked for local tasks. This could be used
|
|
to bypass protection and execute commands on the executor.
|