You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Daniel Golle 267873ac9b
base-files: don't evaluate block-device uevent
Current code and also before commit da52dd0c83 was vulnerable to shell
injection using volume lables in the GPT partition table of block
devices. Given that partition names can be freely defined in GPT tables
we really shouldn't evaluate a string which is potentially crafted with
evil intentions. Hence rather use `export -n` to absorb the uevent's
variables into the environment.

Fixes commit da52dd0c83 (base-files: quote values when evaluating uevent)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
[mschiffer@universe-factory.net: suggested export -n usage]
6 years ago
..
keep.d base-files: add /etc/shadow to list of essential files to keep in sysupgrade (bug 18206) 10 years ago
common.sh base-files: don't evaluate block-device uevent 6 years ago
fwtool.sh base-files: add a hint in sysupgrade that shows what to do when the image metadata check fails 8 years ago
nand.sh procd: nand: remove nand_board_name platform override 7 years ago
stage2 sysupgrade: don't kill our own parent 7 years ago