Daniel Alvarez ed125c0c1c Make IpNetnsExecFilter more strict to detect aliases ... Currently, this filter only takes into account 'ip netns exec' as input but this command accepts different aliases like 'ip net e' or 'ip netn ex', etcetera. This is a security issue since bypassing this filter basically allows anyone to execute arbitary commands because IpFilter will get hit and there's not going to be any further checks against CommandFilters. Change-Id: I2f6e55de4e60f2d3a6166c2fefbc31e9afc6c26f Closes-Bug: 1765734 Co-Authored-By: Jakub Libosvar <jlibosva@redhat.com> Signed-off-by: Daniel Alvarez <dalvarez@redhat.com>		2018-05-10 12:40:29 +00:00
..
tests	Make IpNetnsExecFilter more strict to detect aliases	2018-05-10 12:40:29 +00:00
__init__.py	Fix Python 3 support for eventlet monkey-patching	2015-10-13 21:51:47 +02:00
client.py	Add bandit to pep8 job	2017-12-13 11:25:50 +08:00
cmd.py	Python 3: Don't use BaseException.message attribute	2015-08-26 16:40:42 +09:00
daemon.py	Allow rootwrap-daemon to timeout and exit	2017-03-02 10:58:04 +09:00
filters.py	Make IpNetnsExecFilter more strict to detect aliases	2018-05-10 12:40:29 +00:00
jsonrpc.py	Drop python 2.6 support	2015-11-26 21:00:29 +08:00
version.py	pbr.version.VersionInfo needs package name (oslo.xyz and not oslo_xyz)	2017-02-06 12:49:21 -05:00
wrapper.py	Ignore syslog settings if /dev/log is not present	2017-11-23 15:38:16 +01:00