Signed-off-by: maipbui <maibui@microsoft.com> Dependency: [PR (#12065)](https://github.com/sonic-net/sonic-buildimage/pull/12065) needs to merge first. #### Why I did it `subprocess.Popen()` and `subprocess.check_output()` is used with `shell=True`, which is very dangerous for shell injection. #### How I did it Disable `shell=True`, enable `shell=False` #### How to verify it Tested on DUT, compare and verify the output between the original behavior and the new changes' behavior. [testresults.zip](https://github.com/sonic-net/sonic-buildimage/files/9550867/testresults.zip) |
||
---|---|---|
.. | ||
ACS-MSN2700 | ||
Mellanox-SN2700 | ||
Mellanox-SN2700-C28D8 | ||
Mellanox-SN2700-D40C8S8 | ||
Mellanox-SN2700-D48C8 | ||
plugins | ||
default_sku | ||
installer.conf | ||
pcie.yaml | ||
platform_asic | ||
platform_components.json | ||
platform_reboot | ||
platform_wait | ||
platform.json | ||
pmon_daemon_control.json | ||
sensors.conf | ||
system_health_monitoring_config.json | ||
thermal_policy.json |