Use SECURITY-144 branch of remoting as the starting point
Updating to reflect changes made in remoting
[SECURITY-144]

Provide opportunity to install CallableDecorators before channels are created, to ensure every callable sent gets caught
[SECURITY-144] Introduced annotation to mark Callables whether they can be safely invoked from slaves
[FIXED SECURITY-146]

Hide system information and diagnostics of the master from slaves
[FIXED SECURITY-147]

This callable allows an arbitrary file to be read from the master
[SECURITY-144] Make annotation of anonymous Callables easier

We often create anonymous Callable types, yet anonymous class cannot be annotated.

These convenient base classes make that transition easy
[SECURITY-144] Classify all the core callables one way or the other
Allow hudson.remoting.* callables that are used to implement lower-level functionalities

... like pipes.

IOSyncer, PingThread.Ping, RPCRequest, SetMaximumBytecodeLevel look all harmless.

PreloadJarTask is dubious, but with classloading from slave disabled, it becomes harmless.
A merge failure in 1239ed3b

If you look at the log graph of this file, you'll see that 535c111 removed this line for SECURITY-76, but it's still present in 1239ed3b.

Most likely because d482fc50 edited a nearby line, and the merge conflict wasn't properly resolved.
This is failing the animal sniffer test
Added a hook to intercept remote file access and reject them if necessary
Fix up.

- If a write results in a file creation, do the create check, to align with the POSIX semantics.
- Don't make pointless mkdirs check if the directory already exists
- read vs readSymlink difference is dangerous because read() can be called for symlinks in other context as well.
Filled in the blank of FilePathFilter
Merge branch 'security' into SECURITY-144

Conflicts:
	maven-plugin/src/main/java/hudson/maven/AbstractMavenBuilder.java
	maven-plugin/src/main/java/hudson/maven/AbstractMavenProcessFactory.java
	maven-plugin/src/main/java/hudson/maven/Maven31ProcessFactory.java
	maven-plugin/src/main/java/hudson/maven/Maven3Builder.java
	maven-plugin/src/main/java/hudson/maven/Maven3ProcessFactory.java
	maven-plugin/src/main/java/hudson/maven/MavenBuildProxy.java
	maven-plugin/src/main/java/hudson/maven/MavenBuilder.java
	maven-plugin/src/main/java/hudson/maven/MavenProcessFactory.java
	maven-plugin/src/main/java/hudson/maven/MavenVersionCallable.java
	maven-plugin/src/main/java/hudson/maven/ProcessCache.java
	maven-plugin/src/main/java/hudson/maven/RedeployPublisher.java
	maven-plugin/src/main/java/hudson/maven/SplittableBuildListener.java
Merge branch 'security' into SECURITY-144
Merge branch 'security' into SECURITY-144
Comment.
For now, at least print warnings about unmarked callables.
Completing the migration to Java6

(cherry picked from commit 5e7b844b65cf021ce1378bc1a1f78f9bc8a2b33d)

Conflicts:
	changelog.html