oslo.rootwrap/oslo_rootwrap/tests
Daniel Alvarez ed125c0c1c Make IpNetnsExecFilter more strict to detect aliases
Currently, this filter only takes into account 'ip netns exec' as
input but this command accepts different aliases like 'ip net e' or
'ip netn ex', etcetera. This is a security issue since bypassing
this filter basically allows anyone to execute arbitary commands
because IpFilter will get hit and there's not going to be any
further checks against CommandFilters.

Change-Id: I2f6e55de4e60f2d3a6166c2fefbc31e9afc6c26f
Closes-Bug: 1765734
Co-Authored-By: Jakub Libosvar <jlibosva@redhat.com>
Signed-off-by: Daniel Alvarez <dalvarez@redhat.com>
2018-05-10 12:40:29 +00:00
..
__init__.py Move files out of the namespace package 2014-12-18 16:08:01 -05:00
run_daemon.py Fix Python 3 support for eventlet monkey-patching 2015-10-13 21:51:47 +02:00
test_functional_eventlet.py Protect rootwrap daemon socket against multiple threads 2017-11-10 13:55:26 +09:00
test_functional.py Allow rootwrap-daemon to timeout and exit 2017-03-02 10:58:04 +09:00
test_rootwrap.py Make IpNetnsExecFilter more strict to detect aliases 2018-05-10 12:40:29 +00:00