[jira] [Commented] (IGNITE-13300) Ignite sandbox vulnerability allows to execute user code in privileged proxy

2020-07-28 Thread Ignite TC Bot (Jira)


[ 
https://issues.apache.org/jira/browse/IGNITE-13300?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17166172#comment-17166172
 ] 

Ignite TC Bot commented on IGNITE-13300:


{panel:title=Branch: [pull/8084/head] Base: [master] : No blockers 
found!|borderStyle=dashed|borderColor=#ccc|titleBGColor=#D6F7C1}{panel}
{panel:title=Branch: [pull/8084/head] Base: [master] : New Tests 
(12)|borderStyle=dashed|borderColor=#ccc|titleBGColor=#D6F7C1}
{color:#8b}Service Grid (legacy mode){color} [[tests 
4|https://ci.ignite.apache.org/viewLog.html?buildId=5493337]]
* {color:#013220}IgniteServiceGridTestSuite: 
ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple 
[val1=DiscoveryEvent [evtNode=b9ae7d8f-be45-4e7f-82f3-64ed89f527b4, topVer=0, 
msgTemplate=null, span=null, nodeId8=0e52e40b, msg=, type=NODE_JOINED, 
tstamp=1595846685869], val2=AffinityTopologyVersion 
[topVer=8292958128010032154, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite: 
ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple 
[val1=DiscoveryEvent [evtNode=b9ae7d8f-be45-4e7f-82f3-64ed89f527b4, topVer=0, 
msgTemplate=null, span=null, nodeId8=0e52e40b, msg=, type=NODE_JOINED, 
tstamp=1595846685869], val2=AffinityTopologyVersion 
[topVer=8292958128010032154, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite: 
ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple 
[val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest 
[id=1b4ffdf8371-a65f7e8e-de9a-4e12-a528-5248bf27023e, reqs=SingletonList 
[ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent 
[evtNode=37000a16-f9ac-479c-b8f9-7741d780a2c2, topVer=0, msgTemplate=null, 
span=null, nodeId8=37000a16, msg=null, type=DISCOVERY_CUSTOM_EVT, 
tstamp=1595846685869]], val2=AffinityTopologyVersion 
[topVer=-7665357655435093363, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite: 
ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple 
[val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest 
[id=1b4ffdf8371-a65f7e8e-de9a-4e12-a528-5248bf27023e, reqs=SingletonList 
[ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent 
[evtNode=37000a16-f9ac-479c-b8f9-7741d780a2c2, topVer=0, msgTemplate=null, 
span=null, nodeId8=37000a16, msg=null, type=DISCOVERY_CUSTOM_EVT, 
tstamp=1595846685869]], val2=AffinityTopologyVersion 
[topVer=-7665357655435093363, minorTopVer=0]]] - PASSED{color}

{color:#8b}Service Grid{color} [[tests 
4|https://ci.ignite.apache.org/viewLog.html?buildId=5493336]]
* {color:#013220}IgniteServiceGridTestSuite: 
ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple 
[val1=DiscoveryEvent [evtNode=da30916c-3270-4d54-91af-628c39db2c3b, topVer=0, 
msgTemplate=null, span=null, nodeId8=1e82feac, msg=, type=NODE_JOINED, 
tstamp=1595846571942], val2=AffinityTopologyVersion 
[topVer=1614076897849802316, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite: 
ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple 
[val1=DiscoveryEvent [evtNode=da30916c-3270-4d54-91af-628c39db2c3b, topVer=0, 
msgTemplate=null, span=null, nodeId8=1e82feac, msg=, type=NODE_JOINED, 
tstamp=1595846571942], val2=AffinityTopologyVersion 
[topVer=1614076897849802316, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite: 
ServiceDeploymentProcessIdSelfTest.topologyVersion[Test event=IgniteBiTuple 
[val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest 
[id=a5aa8ef8371-a2845bbf-08f3-4fed-baaf-f295be021297, reqs=SingletonList 
[ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent 
[evtNode=64ce1365-84e5-4e81-975c-4cb4d348a638, topVer=0, msgTemplate=null, 
span=null, nodeId8=64ce1365, msg=null, type=DISCOVERY_CUSTOM_EVT, 
tstamp=1595846571942]], val2=AffinityTopologyVersion 
[topVer=8958066144825306395, minorTopVer=0]]] - PASSED{color}
* {color:#013220}IgniteServiceGridTestSuite: 
ServiceDeploymentProcessIdSelfTest.requestId[Test event=IgniteBiTuple 
[val1=DiscoveryCustomEvent [customMsg=ServiceChangeBatchRequest 
[id=a5aa8ef8371-a2845bbf-08f3-4fed-baaf-f295be021297, reqs=SingletonList 
[ServiceUndeploymentRequest []]], affTopVer=null, super=DiscoveryEvent 
[evtNode=64ce1365-84e5-4e81-975c-4cb4d348a638, topVer=0, msgTemplate=null, 
span=null, nodeId8=64ce1365, msg=null, type=DISCOVERY_CUSTOM_EVT, 
tstamp=1595846571942]], val2=AffinityTopologyVersion 
[topVer=8958066144825306395, minorTopVer=0]]] - PASSED{color}

{color:#8b}Security{color} [[tests 
4|https://ci.ignite.apache.org/viewLog.html?buildId=5493352]]
* {color:#013220}SecurityTestSuite: 
PrivilegedProxyTest.testPrivelegedUserObject - PASSED{color}
* {color:#013220}SecurityTestSuite: 
IgniteOperationsInsideSandboxTest.testAffinity - PASSED{color}
* {color:#013220}SecurityTestSuite: 

[jira] [Commented] (IGNITE-13300) Ignite sandbox vulnerability allows to execute user code in privileged proxy

2020-07-27 Thread Denis Garus (Jira)


[ 
https://issues.apache.org/jira/browse/IGNITE-13300?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17165697#comment-17165697
 ] 

Denis Garus commented on IGNITE-13300:
--

[~alex_pl] LGTM

> Ignite sandbox vulnerability allows to execute user code in privileged proxy
> 
>
> Key: IGNITE-13300
> URL: https://issues.apache.org/jira/browse/IGNITE-13300
> Project: Ignite
>  Issue Type: Bug
>  Components: security
>Affects Versions: 2.9
>Reporter: Aleksey Plekhanov
>Assignee: Aleksey Plekhanov
>Priority: Critical
>  Labels: iep-38, sandbox
>  Time Spent: 10m
>  Remaining Estimate: 0h
>
> Ignite sandbox returns a privileged proxy for Ignite and some other system 
> interfaces. If the user implements one of these interfaces and gets via 
> privileged proxy an instance of implemented class, privileged proxy for user 
> class will be returned.
> Reproducer:
> {code:java}
> public class PrivilegedProxyTest extends AbstractSandboxTest {
> public void testPrivelegedUserObject() throws Exception {
> 
> grid(CLNT_FORBIDDEN_WRITE_PROP).getOrCreateCache(DEFAULT_CACHE_NAME).put(0, 
> new TestIterator<>());
> runForbiddenOperation(() -> 
> grid(CLNT_FORBIDDEN_WRITE_PROP).compute().run(() -> {
> GridIterator it = 
> (GridIterator)Ignition.localIgnite().cache(DEFAULT_CACHE_NAME).get(0);
> it.iterator();
> }), AccessControlException.class);
> }
> public static class TestIterator extends GridIterableAdapter {
> public TestIterator() {
> super(Collections.emptyIterator());
> }
> @Override public GridIterator iterator() {
> controlAction();
> return super.iterator();
> }
> }
> }
> {code}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)