zuul
/
zuul
Code Issues Proposed changes
zuul/zuul/ansible/action
History
Tobias Henkel 53147dd648
Fix safe path checks 
Currently the safe path checks mostly just work on the pure given
arguments. However ansible searches in several paths for the file and
uses this then. Thus the safe path check can validate a non existing
file (as it doesn't obey the modules search path) while the module
finds the file and follows any symlinks.

The solution for this is not to try to determine the correct paths
ourselves but hooking into the search routine (_find_needle) the
modules use for finding their local files. Using this approach we have
the correct paths and can validate them properly.

Change-Id: I2b3dbcfcfcf8a82e4e6df286cc3287aaa7fa2790
 		2018-03-12 16:00:26 +01:00
..
__init__.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
add_host.py Fix all action plugins to import safely 2017-02-22 14:49:34 -05:00
add_host.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
asa_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
asa_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
asa_template.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
asa_template.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
assemble.py Fix safe path checks 2018-03-12 16:00:26 +01:00
assemble.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
copy.py Fix safe path checks 2018-03-12 16:00:26 +01:00
copy.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
dellos6_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
dellos6_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
dellos9_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
dellos9_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
dellos10_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
dellos10_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
eos_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
eos_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
eos_template.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
eos_template.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
fetch.py Prevent execution of locally overridden core modules 2017-08-29 10:50:53 -05:00
fetch.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
include_vars.py Fix safe path checks 2018-03-12 16:00:26 +01:00
include_vars.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
ios_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
ios_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
ios_template.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
ios_template.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
iosxr_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
iosxr_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
iosxr_template.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
iosxr_template.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
junos_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
junos_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
junos_template.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
junos_template.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
net_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
net_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
net_template.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
net_template.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
network.py Fix all action plugins to import safely 2017-02-22 14:49:34 -05:00
network.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
normal.py executor: block stat get_mime on localhost 2018-01-19 02:30:55 +00:00
normal.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
nxos_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
nxos_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
nxos_template.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
nxos_template.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
ops_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
ops_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
ops_template.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
ops_template.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
patch.py Fix safe path checks 2018-03-12 16:00:26 +01:00
patch.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
script.py Fix safe path checks 2018-03-12 16:00:26 +01:00
script.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
sros_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
sros_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
synchronize.py Prevent execution of locally overridden core modules 2017-08-29 10:50:53 -05:00
synchronize.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
template.py Fix safe path checks 2018-03-12 16:00:26 +01:00
template.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
unarchive.py Fix safe path checks 2018-03-12 16:00:26 +01:00
unarchive.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
vyos_config.py Add action plugins to restrict untrusted execution 2017-02-15 16:12:40 -08:00
vyos_config.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
win_copy.py Fix safe path checks 2018-03-12 16:00:26 +01:00
win_copy.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00
win_template.py Fix safe path checks 2018-03-12 16:00:26 +01:00
win_template.pyi Use mypy to do static type checking 2017-07-27 14:34:07 -05:00