java.lang.SecurityException: agent may not write about cobertura-plugin

[udaysharma]

+1

Experiencing the same issue. Any guidance? It looks like the plugin is mixing slave (/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/lib/clang/7.3.0/include) and master (/opt/bitnami/apps) paths.

Jenkins v2.68, Cobertura Plugin v1.10

Error:
agent may not mkdirs 

/opt/bitnami/apps/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/lib/clang/7.3.0/include

See https://jenkins.io/redirect/security-144 for more details

[jeffpearce]

@JanC @udaysharma - going through some older issues. Is this still a problem?

[jacobhampel]

@jeffpearce Yes, I think this problem isn't fixed yet. I got this error too.

[JanC]

Hi,
I stopped using the plugin as I use Jenkins pipelines. I got it working correctly though after updating to a more recent version.

[basava12345]

Jenkins master is now more strict about what commands its slaves can send to the master. Unfortunately, this prevents some plugins from functioning correctly, as those plugins do not specify which commands are open for slaves to execute and which ones are not
For more reference
https://wiki.jenkins.io/display/JENKINS/Slave+To+Master+Access+Control

Here I feel fix should be mainly related to implementing the SECURITY-144-compat module in the plugin code.
However we have passing scenario also for the jobs running in slaves.
(Are the commands being used in this case are different ? )