[elbe-devel] [PATCH 0/3] elbepack: shellhelper: fix chroot escapes

Thomas Weißschuh thomas.weissschuh at linutronix.de
Thu Apr 25 17:47:19 CEST 2024


The way shellhelper.chroot() works is buggy and allows chroot escapes
through shell control syntax.

Signed-off-by: Thomas Weißschuh <thomas.weissschuh at linutronix.de>
---
Thomas Weißschuh (3):
      elbepack: rfs: read preseed.txt directly from chroot
      elbepack: shellhelper: handle non-shell commands
      elbepack: shellhelper: make chroot() more robust

 elbepack/rfs.py         |  3 +--
 elbepack/shellhelper.py | 34 +++++++++++++++++++++++++++-------
 2 files changed, 28 insertions(+), 9 deletions(-)
---
base-commit: 97b4d7bd2c795c1b371d0b83194d46fa01419734
change-id: 20240425-b4-chroot-0f2734ee4f70

Best regards,
-- 
Thomas Weißschuh <thomas.weissschuh at linutronix.de>



More information about the elbe-devel mailing list