[elbe-devel] [PATCH 0/3] elbepack: shellhelper: fix chroot escapes

[Eduard Krein]

Am Donnerstag, dem 25.04.2024 um 17:47 +0200 schrieb Thomas Weißschuh:
> The way shellhelper.chroot() works is buggy and allows chroot escapes
> through shell control syntax.
> 
> Signed-off-by: Thomas Weißschuh <thomas.weissschuh at linutronix.de>
Reviewed-by: Eduard Krein <eduard.krein at linutronix.de>

For the whole series
> ---
> Thomas Weißschuh (3):
>       elbepack: rfs: read preseed.txt directly from chroot
>       elbepack: shellhelper: handle non-shell commands
>       elbepack: shellhelper: make chroot() more robust
> 
>  elbepack/rfs.py         |  3 +--
>  elbepack/shellhelper.py | 34 +++++++++++++++++++++++++++-------
>  2 files changed, 28 insertions(+), 9 deletions(-)
> ---
> base-commit: 97b4d7bd2c795c1b371d0b83194d46fa01419734
> change-id: 20240425-b4-chroot-0f2734ee4f70
> 
> Best regards,

-- 
Eduard Krein
Linutronix GmbH | Bahnhofstrasse 3 | D-88690 Uhldingen-Mühlhofen
Phone: +49 7556 25 999 19; Fax.: +49 7556 25 999 99

Hinweise zum Datenschutz finden Sie hier (Informations on data privacy 
can be found here): https://linutronix.de/legal/data-protection.php

Linutronix GmbH | Firmensitz (Registered Office): Uhldingen-Mühlhofen |
Registergericht (Registration Court): Amtsgericht Freiburg i.Br.,
HRB700 806 | Geschäftsführer (Managing Directors): Heinz Egger, Thomas
Gleixner, Tiffany Silva, Sean Fennelly, Jeffrey Schneiderman