matthew/sonic-buildimage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
master
sonic-buildimage/device/dell/x86_64-dellemc_n3248pxe_c3338-r0
History
Mai Bui 06e1a0bc14
[device/dell] Mitigation for security vulnerability (#11875) 
Dependency: [PR (#12065)](https://github.com/sonic-net/sonic-buildimage/pull/12065) needs to merge first.

#### Why I did it
`commands` module is not protected against malicious input
`getstatusoutput` is detected without a static string, uses `shell=True`
#### How I did it
Eliminate the use of `commands`
Use `subprocess.run()`, commands in `subprorcess.run()` are totally static
Fix indentation
#### How to verify it
Tested on DUT
[dell_log.txt](https://github.com/sonic-net/sonic-buildimage/files/9561332/dell_log.txt)
2023-01-05 16:22:09 -08:00
..
DELLEMC-N3248PXE DellEMC: N3248PXE Initial platform commit (#8562) 2021-09-25 15:35:16 -07:00
plugins [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
default_sku DellEMC: N3248PXE Initial platform commit (#8562) 2021-09-25 15:35:16 -07:00
installer.conf [DellEMC] DMA errors are seen when loading bullseye kernel (#9641) 2022-01-03 08:47:13 -08:00
led_proc_init.soc DellEMC: N3248PXE Initial platform commit (#8562) 2021-09-25 15:35:16 -07:00
platform_asic Add platform_asic file to each platform folder in sonic-device-data based package (#8542) 2021-10-08 19:27:48 -07:00
pmon_daemon_control.json DellEMC: N3248PXE Initial platform commit (#8562) 2021-09-25 15:35:16 -07:00
sensors.conf DellEMC: N3248PXE Initial platform commit (#8562) 2021-09-25 15:35:16 -07:00