matthew/sonic-buildimage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
61a085e55e
sonic-buildimage/dockers
History
Mai Bui 61a085e55e
Replace os.system and remove subprocess with shell=True (#12177) 
Signed-off-by: maipbui <maibui@microsoft.com>
#### Why I did it
`subprocess` is used with `shell=True`, which is very dangerous for shell injection.
`os` - not secure against maliciously constructed input and dangerous if used to evaluate dynamic content
#### How I did it
remove `shell=True`, use `shell=False`
Replace `os` by `subprocess`
2022-11-04 10:48:51 -04:00
..
docker-base Add a config variable to override default container registry instead of dockerhub. (#10166) 2022-03-14 18:09:20 +08:00
docker-base-bullseye [Build] Add the missing debian source bullseye-updates/buster-updates (#12522) 2022-10-27 10:15:14 -07:00
docker-base-buster [Build] Add the missing debian source bullseye-updates/buster-updates (#12522) 2022-10-27 10:15:14 -07:00
docker-base-stretch Add a config variable to override default container registry instead of dockerhub. (#10166) 2022-03-14 18:09:20 +08:00
docker-basic_router [supervisord]: use abspath as supervisord entrypoint (#5995) 2020-11-22 21:18:44 -08:00
docker-config-engine Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
docker-config-engine-bullseye Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
docker-config-engine-buster Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
docker-config-engine-stretch Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
docker-database update notify-keyspace-events in redis.conf (#12540) 2022-10-28 18:28:57 -07:00
docker-dhcp-relay Add dhcp6relay dualtor option (#12459) 2022-10-21 10:33:10 -07:00
docker-eventd Add events to host and create rsyslog_plugin deb pkg (#12059) 2022-09-21 09:20:53 -07:00
docker-fpm-frr Allow TSA on ibgp sessions between linecards on packet chassis (#12589) 2022-11-03 08:54:33 -07:00
docker-fpm-gobgp Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
docker-iccpd iccpd bullseye migration (#12097) 2022-10-06 11:28:53 -07:00
docker-lldp Replace os.system and remove subprocess with shell=True (#12177) 2022-11-04 10:48:51 -04:00
docker-macsec [macsec]: Add MACsec clear CLI support (#11731) 2022-09-07 08:16:23 +08:00
docker-mux [master][sonic-linkmgrd] submodule updates (#10763) 2022-05-06 13:42:23 -07:00
docker-nat Replace os.system and remove subprocess with shell=True (#12177) 2022-11-04 10:48:51 -04:00
docker-orchagent [tunnel_pkt_handler]: Skip nonexistent intfs (#12424) 2022-10-20 09:29:57 -07:00
docker-pde PDE migration to bullseye (#10836) 2022-07-13 11:58:47 -07:00
docker-platform-monitor [pmon] Add smartmontools to pmon docker (#11837) 2022-10-17 13:26:31 -07:00
docker-ptf Enable system-site-packages for ptf docker and install thrift for test_qos_sai (#12094) 2022-09-17 13:33:53 +08:00
docker-ptf-sai Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
docker-router-advertiser Fix radv.conf traceback when VLAN_INTERFACE is not defined (#12034) 2022-09-09 12:54:05 -07:00
docker-sflow Replace swsssdk with swsscommon (#11215) 2022-07-11 10:01:10 +08:00
docker-snmp Upgrade snmp docker to Bullseye (#11741) 2022-08-19 11:20:17 -07:00
docker-sonic-mgmt [docker-sonic-mgmt] Cleanup and upgrade some packages (#12218) 2022-10-18 10:02:30 +08:00
docker-sonic-mgmt-framework Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
docker-sonic-p4rt Update p4rt configuration to match SONiC upstream schema. (#10725) 2022-08-04 14:56:48 -07:00
docker-sonic-restapi Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
docker-sonic-sdk Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
docker-sonic-sdk-buildenv Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
docker-sonic-telemetry Parallel building of sonic dockers using native dockerd(dood). (#10352) 2022-04-28 08:39:37 +08:00
docker-swss-layer-bullseye Add ping to swss-layer docker (#11093) 2022-06-10 07:40:37 -07:00
docker-swss-layer-buster Add ping to swss-layer docker (#11093) 2022-06-10 07:40:37 -07:00
docker-teamd [teamd]: Upgrade teamd docker to Bullseye (#11536) 2022-07-27 18:21:22 -07:00
dockerfile-macros.j2 [sonic-config-engine] Clean up dependencies, pin versions; install Python 3 package in Buster container (#5656) 2020-10-26 13:48:50 -07:00