From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: From: Bastian Stender Date: Mon, 8 Jan 2018 16:18:15 +0100 Message-Id: <20180108151816.23953-1-bst@pengutronix.de> Subject: [ptxdist] [PATCH v2 1/2] python2: prevent host path leakage List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: ptxdist-bounces@pengutronix.de Sender: "ptxdist" To: ptxdist@pengutronix.de Cc: Bastian Stender SWYgY3Jvc3MtY29tcGlsaW5nIGFuZCBob3N0L3RhcmdldCBhcmNoaXRlY3R1cmUgbWF0Y2ggaG9z dCBwYXRocyBhcmUKYWRkZWQgdG8gaW5jbHVkZV9kaXJzIGFuZCBsaWJyYXJ5X2RpcnMgaW4gYWRk X211bHRpYXJjaF9wYXRocygpIChlLmcuCi91c3IvbGliL2kzODYtbGludXgtZ251LCAvdXNyL2lu Y2x1ZGUvaTM4Ni1saW51eC1nbnUpLiBUaGlzIGxlYWRzIHRvCmJ1aWxkIGZhaWx1cmVzIGZvciBz b21lIGV4dGVuc2lvbnMgKGF0IGxlYXN0IF9zc2wgYW5kIF9zb2NrZXQpLgoKcHR4ZGlzdCBkb2Vz IG5vdCBzdXBwb3J0IG11bHRpYXJjaCwgc28gcmVtb3ZlIHRoaXMgYWRkaXRpb24gd2hlbgpjcm9z cy1jb21waWxpbmcuCgpTaWduZWQtb2ZmLWJ5OiBCYXN0aWFuIFN0ZW5kZXIgPGJzdEBwZW5ndXRy b25peC5kZT4KLS0tCkNoYW5nZXMgc2luY2UgKGltcGxpY2l0KSB2MToKLSBhZGQgbG9jYWwgcGF0 aHMgd2hlbiBub3QgY3Jvc3MtY29tcGlsaW5nCi0gcGVyZm9ybSBhZGRfbXVsdGlhcmNoX3BhdGhz KCkgb25seSB3aGVuIG5vdCBjcm9zcy1jb21waWxpbmcKLS0tCiAuLi4vMDAwOS1weXRob24yLXBy ZXZlbnQtaG9zdC1wYXRoLWxlYWthZ2UucGF0Y2ggICB8IDM5ICsrKysrKysrKysrKysrKysrKysr KysKIHBhdGNoZXMvUHl0aG9uLTIuNy4xMy9zZXJpZXMgICAgICAgICAgICAgICAgICAgICAgIHwg IDMgKy0KIDIgZmlsZXMgY2hhbmdlZCwgNDEgaW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQog Y3JlYXRlIG1vZGUgMTAwNjQ0IHBhdGNoZXMvUHl0aG9uLTIuNy4xMy8wMDA5LXB5dGhvbjItcHJl dmVudC1ob3N0LXBhdGgtbGVha2FnZS5wYXRjaAoKZGlmZiAtLWdpdCBhL3BhdGNoZXMvUHl0aG9u LTIuNy4xMy8wMDA5LXB5dGhvbjItcHJldmVudC1ob3N0LXBhdGgtbGVha2FnZS5wYXRjaCBiL3Bh dGNoZXMvUHl0aG9uLTIuNy4xMy8wMDA5LXB5dGhvbjItcHJldmVudC1ob3N0LXBhdGgtbGVha2Fn ZS5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwMDAuLmUyYzM1ZTFmOQot LS0gL2Rldi9udWxsCisrKyBiL3BhdGNoZXMvUHl0aG9uLTIuNy4xMy8wMDA5LXB5dGhvbjItcHJl dmVudC1ob3N0LXBhdGgtbGVha2FnZS5wYXRjaApAQCAtMCwwICsxLDM5IEBACitGcm9tOiBCYXN0 aWFuIFN0ZW5kZXIgPGJzdEBwZW5ndXRyb25peC5kZT4KK0RhdGU6IE1vbiwgOCBKYW4gMjAxOCAx NTo1NTo0MCArMDEwMAorU3ViamVjdDogW1BBVENIXSBweXRob24yOiBwcmV2ZW50IGhvc3QgcGF0 aCBsZWFrYWdlCisKK0lmIGNyb3NzLWNvbXBpbGluZyBhbmQgaG9zdC90YXJnZXQgYXJjaGl0ZWN0 dXJlIG1hdGNoIGhvc3QgcGF0aHMgYXJlCithZGRlZCB0byBpbmNsdWRlX2RpcnMgYW5kIGxpYnJh cnlfZGlycyBpbiBhZGRfbXVsdGlhcmNoX3BhdGhzKCkgKGUuZy4KKy91c3IvbGliL2kzODYtbGlu dXgtZ251LCAvdXNyL2luY2x1ZGUvaTM4Ni1saW51eC1nbnUpLiBUaGlzIGxlYWRzIHRvCitidWls ZCBmYWlsdXJlcyBmb3Igc29tZSBleHRlbnNpb25zIChhdCBsZWFzdCBfc3NsIGFuZCBfc29ja2V0 KS4KKworcHR4ZGlzdCBkb2VzIG5vdCBzdXBwb3J0IG11bHRpYXJjaCwgc28gcmVtb3ZlIHRoaXMg YWRkaXRpb24gd2hlbgorY3Jvc3MtY29tcGlsaW5nLgorCitCYXNlZCBvbiBhIHBhdGNoIGJ5IEFs ZXhhbmRydSBBcmRlbGVhbiA8YXJkZWxlYW5hbGV4QGdtYWlsLmNvbT4uCisKK1NlZSB0aGVzZSBw YXRjaGVzIGZvciByZWZlcmVuY2U6CistIGh0dHBzOi8vZ2l0aHViLmNvbS9vcGVud3J0L3BhY2th Z2VzL3B1bGwvNzg0CistIGh0dHBzOi8vZ2l0aHViLmNvbS9vcGVud3J0L3BhY2thZ2VzL2Jsb2Iv bWFzdGVyL2xhbmcvcHl0aG9uL3B5dGhvbi9wYXRjaGVzLzAwNi1yZW1vdmUtbXVsdGktYXJjaC1h bmQtbG9jYWwtcGF0aHMucGF0Y2gKKy0gaHR0cDovL2NnaXQub3BlbmVtYmVkZGVkLm9yZy9vcGVu ZW1iZWRkZWQtY29yZS90cmVlL21ldGEvcmVjaXBlcy1kZXZ0b29scy9weXRob24vcHl0aG9uL2hv c3RfaW5jbHVkZV9jb250YW1pbmF0aW9uLnBhdGNoCisKK1NpZ25lZC1vZmYtYnk6IEJhc3RpYW4g U3RlbmRlciA8YnN0QHBlbmd1dHJvbml4LmRlPgorLS0tCisgc2V0dXAucHkgfCAyICstCisgMSBm aWxlIGNoYW5nZWQsIDEgaW5zZXJ0aW9uKCspLCAxIGRlbGV0aW9uKC0pCisKK2RpZmYgLS1naXQg YS9zZXR1cC5weSBiL3NldHVwLnB5CitpbmRleCA4ODczODMxMzIzZjAuLmJkNjYzZGNmYmVjMCAx MDA2NDQKKy0tLSBhL3NldHVwLnB5CisrKysgYi9zZXR1cC5weQorQEAgLTQ1OCw5ICs0NTgsOSBA QCBjbGFzcyBQeUJ1aWxkRXh0KGJ1aWxkX2V4dCk6CisgICAgICAgICBpZiBub3QgY3Jvc3NfY29t cGlsaW5nOgorICAgICAgICAgICAgIGFkZF9kaXJfdG9fbGlzdChzZWxmLmNvbXBpbGVyLmxpYnJh cnlfZGlycywgJy91c3IvbG9jYWwvbGliJykKKyAgICAgICAgICAgICBhZGRfZGlyX3RvX2xpc3Qo c2VsZi5jb21waWxlci5pbmNsdWRlX2RpcnMsICcvdXNyL2xvY2FsL2luY2x1ZGUnKQorKyAgICAg ICAgICAgIHNlbGYuYWRkX211bHRpYXJjaF9wYXRocygpCisgICAgICAgICBpZiBjcm9zc19jb21w aWxpbmc6CisgICAgICAgICAgICAgc2VsZi5hZGRfZ2NjX3BhdGhzKCkKKy0gICAgICAgIHNlbGYu YWRkX211bHRpYXJjaF9wYXRocygpCisgCisgICAgICAgICAjIEFkZCBwYXRocyBzcGVjaWZpZWQg aW4gdGhlIGVudmlyb25tZW50IHZhcmlhYmxlcyBMREZMQUdTIGFuZAorICAgICAgICAgIyBDUFBG TEFHUyBmb3IgaGVhZGVyIGFuZCBsaWJyYXJ5IGZpbGVzLgpkaWZmIC0tZ2l0IGEvcGF0Y2hlcy9Q eXRob24tMi43LjEzL3NlcmllcyBiL3BhdGNoZXMvUHl0aG9uLTIuNy4xMy9zZXJpZXMKaW5kZXgg M2E4MjY1ODg4Li40NzYyNDQ3MzQgMTAwNjQ0Ci0tLSBhL3BhdGNoZXMvUHl0aG9uLTIuNy4xMy9z ZXJpZXMKKysrIGIvcGF0Y2hlcy9QeXRob24tMi43LjEzL3NlcmllcwpAQCAtOCw0ICs4LDUgQEAK IDAwMDYtcHl0aG9uLWRvbi10LWFkZC1ycGF0aHMtaW4tc2V0dXAucHkucGF0Y2gKIDAwMDctYWRk LW1vcmUtc2VhcmNoLXBhdGhzLnBhdGNoCiAwMDA4LXJlc29sdmUtZXhpc3RpbmctTERfTElCUkFS WV9QQVRILWR1cmluZy1tYWtlLW5vdC1kdXIucGF0Y2gKLSMgOTQ5N2I1NzQyMTJjYzg3MGU0Yzhm Y2U0ZGQxYjBiNDQgIC0gZ2l0LXB0eC1wYXRjaGVzIG1hZ2ljCiswMDA5LXB5dGhvbjItcHJldmVu dC1ob3N0LXBhdGgtbGVha2FnZS5wYXRjaAorIyAxZmI0OGIyODQ4YzEwMmUzODQ4OTk5YjFkOWY2 NTcxMCAgLSBnaXQtcHR4LXBhdGNoZXMgbWFnaWMKLS0gCjIuMTEuMAoKCl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCnB0eGRpc3QgbWFpbGluZyBsaXN0CnB0 eGRpc3RAcGVuZ3V0cm9uaXguZGU=