matthew/sonic-buildimage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
06e1a0bc14
sonic-buildimage/platform
History
Mai Bui 06e1a0bc14
[device/dell] Mitigation for security vulnerability (#11875) 
Dependency: [PR (#12065)](https://github.com/sonic-net/sonic-buildimage/pull/12065) needs to merge first.

#### Why I did it
`commands` module is not protected against malicious input
`getstatusoutput` is detected without a static string, uses `shell=True`
#### How I did it
Eliminate the use of `commands`
Use `subprocess.run()`, commands in `subprorcess.run()` are totally static
Fix indentation
#### How to verify it
Tested on DUT
[dell_log.txt](https://github.com/sonic-net/sonic-buildimage/files/9561332/dell_log.txt)
2023-01-05 16:22:09 -08:00
..
barefoot [BFN]: Implement getting psu related sensors in sonic_platform directly from BMC (#12786) 2022-12-14 22:21:36 +08:00
broadcom [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
cavium [infra] Support syslog rate limit configuration (#12490) 2022-12-20 10:53:58 +02:00
centec [centec]: reference to v1.11.0-1 sai debian package for master (#13206) 2023-01-03 09:53:46 -08:00
centec-arm64 [centec]: reference to v1.11.0-1 sai debian package for master (#13206) 2023-01-03 09:53:46 -08:00
checkout Platform/cisco-8000 module for sonic-buildimage (#8172) 2021-08-06 09:11:54 +08:00
components [infra] Support syslog rate limit configuration (#12490) 2022-12-20 10:53:58 +02:00
generic [dockers] Rename 'docker-snmp-sv2' to 'docker-snmp' (#4699) 2020-06-11 16:04:23 -07:00
innovium [infra] Support syslog rate limit configuration (#12490) 2022-12-20 10:53:58 +02:00
marvell [infra] Support syslog rate limit configuration (#12490) 2022-12-20 10:53:58 +02:00
marvell-arm64 [infra] Support syslog rate limit configuration (#12490) 2022-12-20 10:53:58 +02:00
marvell-armhf [infra] Support syslog rate limit configuration (#12490) 2022-12-20 10:53:58 +02:00
mellanox [infra] Support syslog rate limit configuration (#12490) 2022-12-20 10:53:58 +02:00
nephos [infra] Support syslog rate limit configuration (#12490) 2022-12-20 10:53:58 +02:00
p4 [infra] Support syslog rate limit configuration (#12490) 2022-12-20 10:53:58 +02:00
pddf [pddf]: fix Observing the following error while running 'sfputil show lpmode' command. (#12636) 2022-12-17 14:42:15 -08:00
s3ip-sysfs The CPLD and FPGA driver framework module complies with s3ip sysfs specification (#12891) 2022-12-16 22:05:53 +08:00
template Mount directory warmboot in docker gbsyncd (#11852) 2022-08-26 22:00:45 +08:00
vs [gns3]: modify SONiC VS image name (#13136) 2023-01-03 10:02:10 -08:00