Daniel Alvarez ed125c0c1c Make IpNetnsExecFilter more strict to detect aliases ... Currently, this filter only takes into account 'ip netns exec' as input but this command accepts different aliases like 'ip net e' or 'ip netn ex', etcetera. This is a security issue since bypassing this filter basically allows anyone to execute arbitary commands because IpFilter will get hit and there's not going to be any further checks against CommandFilters. Change-Id: I2f6e55de4e60f2d3a6166c2fefbc31e9afc6c26f Closes-Bug: 1765734 Co-Authored-By: Jakub Libosvar <jlibosva@redhat.com> Signed-off-by: Daniel Alvarez <dalvarez@redhat.com>		2018-05-10 12:40:29 +00:00
..
__init__.py	Move files out of the namespace package	2014-12-18 16:08:01 -05:00
run_daemon.py	Fix Python 3 support for eventlet monkey-patching	2015-10-13 21:51:47 +02:00
test_functional.py	Allow rootwrap-daemon to timeout and exit	2017-03-02 10:58:04 +09:00
test_functional_eventlet.py	Protect rootwrap daemon socket against multiple threads	2017-11-10 13:55:26 +09:00
test_rootwrap.py	Make IpNetnsExecFilter more strict to detect aliases	2018-05-10 12:40:29 +00:00