3 Commits

Author	SHA1	Message	Date
Mai Bui	92d25be08f	[inventec] Replace os.system and remove subprocess with shell=True (#12108) ... Signed-off-by: maipbui <maibui@microsoft.com> Dependency: [https://github.com/sonic-net/sonic-buildimage/pull/12065](https://github.com/sonic-net/sonic-buildimage/pull/12065) #### Why I did it 1. `getstatusoutput` is used without a static string and it uses `shell=True` 2. `subprocess()` - when using with `shell=True` is dangerous. Using subprocess function without a static string can lead to command injection. 3. `os` - not secure against maliciously constructed input and dangerous if used to evaluate dynamic content. #### How I did it 1. use `getstatusoutput` without shell=True 2. `subprocess()` - use `shell=False` instead. use an array string. Ref: [https://semgrep.dev/docs/cheat-sheets/python-command-injection/#mitigation](https://semgrep.dev/docs/cheat-sheets/python-command-injection/#mitigation) 3. `os` - use with `subprocess`	2022-10-14 10:21:44 -04:00
klhaung	6f496bda20	[device][platform] Update Inventec platform porting to support stretch (#2010) ... * [device][platform] d6254qs d6556 platform porting [device][platform] sensor and status led support for d7032q28b d7254q28b d7264q28b d6254qs d6556 [device][platform] qos support for d7032q28b d7254q28b [device][platform] service configuration files for d7032q28b d7254q28b d7264q28b d6254qs d6556 * remove binary files and remove non-supported attributes in config.bcm * remove gpio-ich here. file a PR in sonic-linux-kernel instead. * remove unnecessary comments * add GPL license	2018-09-14 00:54:08 -07:00
klhaung	58db7f17a7	[device & platform] led and transceiver deamon for inventec switch d7032 and d7054 (#1678) ... * [device]: Modify SFPUtil for inventec-d7032 [device]: Add front panel led support for Inventec-d7032 [platform]: Add transceiver monitor daemon for Inventec-d7032 and Inventec-d7054 * [device] follow new porting guide to have broadcom config under device folder * remove license	2018-08-12 12:39:20 -07:00