Mai Bui 92d25be08f [inventec] Replace os.system and remove subprocess with shell=True (#12108) ... Signed-off-by: maipbui <maibui@microsoft.com> Dependency: [https://github.com/sonic-net/sonic-buildimage/pull/12065](https://github.com/sonic-net/sonic-buildimage/pull/12065) #### Why I did it 1. `getstatusoutput` is used without a static string and it uses `shell=True` 2. `subprocess()` - when using with `shell=True` is dangerous. Using subprocess function without a static string can lead to command injection. 3. `os` - not secure against maliciously constructed input and dangerous if used to evaluate dynamic content. #### How I did it 1. use `getstatusoutput` without shell=True 2. `subprocess()` - use `shell=False` instead. use an array string. Ref: [https://semgrep.dev/docs/cheat-sheets/python-command-injection/#mitigation](https://semgrep.dev/docs/cheat-sheets/python-command-injection/#mitigation) 3. `os` - use with `subprocess`		2022-10-14 10:21:44 -04:00
..
barefoot	[BFN] Reworked BFN platform thermals plugin (#11723)	2022-10-11 09:12:28 +08:00
broadcom	[inventec] Replace os.system and remove subprocess with shell=True (#12108)	2022-10-14 10:21:44 -04:00
cavium	Parallel building of sonic dockers using native dockerd(dood). (#10352)	2022-04-28 08:39:37 +08:00
centec	Replace swsssdk with swsscommon in centec devices. (#11350)	2022-08-24 12:39:51 +08:00
centec-arm64	[centec] fix some bugs on centec tsingma bsp and v682 sonic_platform package (#10685)	2022-07-05 18:05:03 -07:00
checkout	Platform/cisco-8000 module for sonic-buildimage (#8172)	2021-08-06 09:11:54 +08:00
components	Mount directory warmboot in docker gbsyncd (#11852)	2022-08-26 22:00:45 +08:00
generic	[dockers] Rename 'docker-snmp-sv2' to 'docker-snmp' (#4699)	2020-06-11 16:04:23 -07:00
innovium	Revert "Support for serdes platform library debian installation for Innovium SONiC image (#11920)" (#12227)	2022-09-29 17:12:20 -07:00
marvell	[bcm sai] upgrade Broadcom SAI to 7.1.0.0-5 (#11236)	2022-06-23 15:34:51 -07:00
marvell-arm64	Support symcrypt fips config for aboot/uboot (#10729)	2022-06-02 15:35:17 +08:00
marvell-armhf	[armhf][sonic-installer] Fix the sonic-installer install images on armhf platform issue (#12284)	2022-10-06 08:29:21 -07:00
mellanox	[device/mellanox] Mitigation for security vulnerability (#11877)	2022-10-06 17:51:31 -04:00
nephos	Parallel building of sonic dockers using native dockerd(dood). (#10352)	2022-04-28 08:39:37 +08:00
p4	Parallel building of sonic dockers using native dockerd(dood). (#10352)	2022-04-28 08:39:37 +08:00
pddf	Adding support for get/set low power mode for QSFPs in PDDF common APIs (#11786)	2022-09-09 14:33:12 -07:00
template	Mount directory warmboot in docker gbsyncd (#11852)	2022-08-26 22:00:45 +08:00
vs	Remove swsssdk from sonic OS image and docker container image (#12323)	2022-10-12 13:04:14 +08:00