diff options
| author | Baptiste Daroussin <bapt@FreeBSD.org> | 2026-05-07 18:22:14 +0000 |
|---|---|---|
| committer | Colin Percival <cperciva@FreeBSD.org> | 2026-05-14 19:06:56 +0000 |
| commit | 2ebec3c7ead5f5b477a5ab47136562777f2bb495 (patch) | |
| tree | 36dc8c084513dcc30aa9745f168380f684d4be8d /sys/dev/netmap/netmap_pipe.c | |
| parent | 09a53a56b7a6892935509e2cda1954fff8078c3f (diff) | |
nuageinit: fix command injection and related issues
- Add shell_escape() helper to safely escape shell arguments
- Apply shell_escape to all user-controlled values in shell commands:
adduser (usershow, useradd, lock, primary_group, groups)
addgroup (groupshow, groupadd, members)
exec_change_password (usermod)
settimezone (tzsetup root and timezone)
install_package (pkg package names)
- Escape double quotes in hostname when writing rc.conf.d/hostname
- Add missing 'local' declaration for resolvconf_command in nameservers()
- Escape interface name in resolvconf -a command
- Change open_resolvconf_conf() from 'w' to 'a' mode to prevent
data loss when nameservers() is called multiple times
- Clean up stale resolvconf.conf at the start of each boot
(skip on postnet to preserve config written by first call)
Approved by: re (cperciva)
MFC After: 1 day
(cherry picked from commit 8b70a203be10411c560ed303ab25713d70b316e9)
(cherry picked from commit 87b18b611ec9a70347fdd239345fa23977bcb2d0)
Diffstat (limited to 'sys/dev/netmap/netmap_pipe.c')
0 files changed, 0 insertions, 0 deletions