648ca075c7
Signed-off-by: maipbui <maibui@microsoft.com> Dependency: [PR (#12065)](https://github.com/sonic-net/sonic-buildimage/pull/12065) needs to merge first. #### Why I did it `subprocess.Popen()` and `subprocess.check_output()` is used with `shell=True`, which is very dangerous for shell injection. #### How I did it Disable `shell=True`, enable `shell=False` #### How to verify it Tested on DUT, compare and verify the output between the original behavior and the new changes' behavior. [testresults.zip](https://github.com/sonic-net/sonic-buildimage/files/9550867/testresults.zip) |
||
|---|---|---|
| .. | ||
| barefoot | ||
| broadcom | ||
| cavium | ||
| centec | ||
| centec-arm64 | ||
| checkout | ||
| components | ||
| generic | ||
| innovium | ||
| marvell | ||
| marvell-arm64 | ||
| marvell-armhf | ||
| mellanox | ||
| nephos | ||
| p4 | ||
| pddf | ||
| template | ||
| vs | ||