From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Thu, 12 Jun 2025 17:56:45 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-pl1-f187.google.com (mail-pl1-f187.google.com [209.85.214.187]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 55CFuhnV003390 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 12 Jun 2025 17:56:44 +0200 Received: by mail-pl1-f187.google.com with SMTP id d9443c01a7336-235089528a0sf17780525ad.1 for ; Thu, 12 Jun 2025 08:56:44 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1749743798; cv=pass; d=google.com; s=arc-20240605; b=dO8sPfD0jJthvUknLremRHT2y670RLstTByZsmiYY5oaxkj7jNgvomyOKcKb0M0luk 4UmD7F+vj7//IVtVwHWUxbSwK8jR8KbzfPAeAEKoY1tymhbc1+6soU41SVYffQ8Xjyzg AmjJDRHZZo7hCotlc5q5aooBIK2lAEGHXaSPokvsTVrsgN4dMkTsnvbGQshT3lTXW5l1 swL5v3kRWbYOk/u/G9zoa3pqZX/LJeSZK21IPFoQLqxVwMOsLgmSQquADBAOG07Rv3Sx IUZkKwWPo5zLKVQAUaFO5mtNnQqhpGMCmBj5/yz/gEBWs6vWCbdTxeNdl8hTnHu6Kisu W2Tw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:feedback-id:mime-version :message-id:date:subject:cc:to:from:dkim-signature; bh=OXeHrSCLz4R50bWZx+XQ71AnPV2i5l3pbFdlSy9KIHY=; fh=e7cEvKZzN45GRs2mp52ye6IuP/LjDvBopVgUyLzVHpM=; b=VJax6IouiB0jrGeg4o6ZiTWOHrgR183aplE3vKK/h1vLmwuLBOYUEm5ymKlGgW4506 oGWtN1vb3aIc9ZjL6A0VRd/hzcUJ06bDieG6MPeIX5oftmoCO+pCYKvA9CWl0OIWOYjp zubUV7cLJP2D90WMqPxxHiMo6S7Fo1brZD41d6R3wGKgLiNKvXnMJ+Djmhi2eL+okVKJ 4wR56SWqPvk2sNkn1UsB6af6VKy2J233VZ2K6PtY7KN4RCHL63trnyctex4qT07mZV+p u/3KXl0hDNdoW62h6fOS6omHyZk/2m8J8G5rBbzrH70cB8REv1FAYLakH8jblq91d1eQ c5DA==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm2 header.b=qMqPPTCC; spf=pass (google.com: domain of fm-1321639-20250612155633a5190c72d4abef53c0-h2rzcf@rts-flowmailer.siemens.com designates 185.136.64.226 as permitted sender) smtp.mailfrom=fm-1321639-20250612155633a5190c72d4abef53c0-H2rzCf@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1749743798; x=1750348598; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:cc:to:from:from:to:cc:subject :date:message-id:reply-to; bh=OXeHrSCLz4R50bWZx+XQ71AnPV2i5l3pbFdlSy9KIHY=; b=CRxLZDGhCylGeTsFdMadZvVx77hF5u4v2EwS4kA1wXzpweEKqNdks7kvs87QUDeJYk hlzjwIGRvpz/Z9xyYzSqJ8A2L3F+6SoCKNv9m4cxEHqf50YFv3S7/XiqZ4nbTxo6Tzpz v3AWfXy/oAkIXFv33QhzlfSk6aktUKvrET6OyiijnuCq6ZCrUNFEXfEBYrMFwF+14YV8 OS4u3am5HOpyKAkn7hE+3lWln+ZAekPTJRhv2cmoo28G85CDn/uCJfnHG8OgfKMcOdEQ tsp4+tHXGofn0XbsMSPECTz4E7P2t64BAz4bCOfWMYjalkwe5OeKv7P4BUsJ4jXCG6sv h1vw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1749743798; x=1750348598; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:feedback-id :mime-version:message-id:date:subject:cc:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=OXeHrSCLz4R50bWZx+XQ71AnPV2i5l3pbFdlSy9KIHY=; b=X2d8UbBwktL7BKwqqvPnDOR9pNyLIA/e7j/l/JW1MBxm63gt3laz8HHpi1gp0rZCqp gOm18ZoKxGoBPODJvzKE2z6RTgmLHT0uGQxaNO5ZwJCk9vPf0Qyc9LosIL/KJ9dsSjVP akqUWEKCo5PrZc/N8A7YEFsnOoAKxGAtgW8sPuCjLOBNnyrNGS/UPwPlpDG0U5IMAnX9 dnmNwcxEQjxnUP/v9Ek1iRP7X+9giXS0i5bC//UO2dVPaVeM+nit2Dl59YF55Ze9y1CZ /2nAK7FrrFx+DFymnDpqFp2zX+I/nMCrwuN6Os/FzU0AF1G0I7OgLWQM500X3ncM6Siu PMeQ== X-Forwarded-Encrypted: i=2; AJvYcCW5RtGA8sozGlSaq/RKAxdojIIqBXJyxsC6rz8mq+S87+1Aq+8Re2VDTgISeSKvYDFB7rd5@ilbers.de X-Gm-Message-State: AOJu0Yy0TR8uXXmzfROgZRPokts71EzG/xTjb+Jp1hvee5raE+8B2sYS QeWhlob5F4feazoB4LJv6HA+iXXVoQibmHJIA2UFzGGUcKJ6tJeuaNMz X-Google-Smtp-Source: AGHT+IEyGn9wXWgoHMXR6yZXtC7OgiL+KHdPzkPIs6XhSrRyZffAzHqdtgOuTuutV10h7dtWWGvp3Q== X-Received: by 2002:a17:90b:3b49:b0:2fa:562c:c1cf with SMTP id 98e67ed59e1d1-313bfd6dd20mr5375444a91.1.1749743797666; Thu, 12 Jun 2025 08:56:37 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h=AZMbMZfpiTzycWrHtaqVCBnEFw13/kCIYQsBTVOpsbHMkcXSCw== Received: by 2002:a17:90b:d8d:b0:311:bf58:2bf4 with SMTP id 98e67ed59e1d1-313bf90fb9els804666a91.0.-pod-prod-00-us; Thu, 12 Jun 2025 08:56:36 -0700 (PDT) X-Received: by 2002:a17:90b:1d49:b0:311:a5ab:3d47 with SMTP id 98e67ed59e1d1-313bfd7ab92mr5298445a91.1.1749743796163; Thu, 12 Jun 2025 08:56:36 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1749743796; cv=none; d=google.com; s=arc-20240605; b=fC1jT0QdN7k+wyguOyMOultXdY3fZIOkT4rvd7Ps51bcnaVmvkfhKSue/ZFKay6yI9 pBfoZ9ULua0CGt7v5qafu4h62l1FsvxK4JR9+bR+t0PcnkDDWxqUbYTN/MmieGpXsdOD qZ85Cklr930Vk+UIAOzptCcYe3eJa5zmUAeYKzknyV23PSAVmkjp+OCLbbc2NL8u9mZg YTx0Py1PIquNHM+Zo1SHRCdzlW+Nz0Kqs9I8X0myxdxQ2LVCvTanAx+v0RwbvZ88Pvr9 RSjtHyp7dV+zLlhErPK57K2KE85GsU7LEk4l0nXY142v8aNalQep+sTzbBshjGbbXQSW 8KtQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=feedback-id:content-transfer-encoding:mime-version:message-id:date :subject:cc:to:from:dkim-signature; bh=SrwPlM1jwqALj5n8OeYXhSBIafC8FmFT6RJPeTZPUXk=; fh=mCWA4AbeJIIx/jB2sZk/ItzTiQhicKuLfQNpyfz1pNQ=; b=UIPBGLxJ6NfdyPFqtLbxMflBDtRf0vUc/2P0uVxzU0B5btBYJCcEWmql5wJvpsCGTO ZwHvkDJr/WNG2YIXO84qxuGBCFnfj8w66xe1UU8eGBDZ9gZiRReYNQRsLshXa7E/60Nx /QjN12Nmzl22Av4cGReoODvr2fedj8K4pxm/SbMZE6T5szwYeFDqx0zth2xfQfRtB06T YI2n4/CnOLfG4LwhL0Ffb7iJliKoaLbByloDQO01mvJbwq/0NQiioktG3mlk21TFJ6cB erGnFMr9JgDHyWhTtSaDZHJ4xGnM5xnX4ad45NOH63dtw/NfHBdmI2+wJaLBEgJz4qI+ cSKg==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm2 header.b=qMqPPTCC; spf=pass (google.com: domain of fm-1321639-20250612155633a5190c72d4abef53c0-h2rzcf@rts-flowmailer.siemens.com designates 185.136.64.226 as permitted sender) smtp.mailfrom=fm-1321639-20250612155633a5190c72d4abef53c0-H2rzCf@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from mta-64-226.siemens.flowmailer.net (mta-64-226.siemens.flowmailer.net. [185.136.64.226]) by gmr-mx.google.com with ESMTPS id 98e67ed59e1d1-313a68487dbsi236680a91.1.2025.06.12.08.56.35 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 12 Jun 2025 08:56:35 -0700 (PDT) Received-SPF: pass (google.com: domain of fm-1321639-20250612155633a5190c72d4abef53c0-h2rzcf@rts-flowmailer.siemens.com designates 185.136.64.226 as permitted sender) client-ip=185.136.64.226; Received: by mta-64-226.siemens.flowmailer.net with ESMTPSA id 20250612155633a5190c72d4abef53c0 for ; Thu, 12 Jun 2025 17:56:33 +0200 From: "'Felix Moessbauer' via isar-users" To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, Felix Moessbauer , Clara Kowalsky Subject: [PATCH 1/1] image-accounts: directly pass arguments to openssl instead of shell Date: Thu, 12 Jun 2025 17:56:10 +0200 Message-ID: <20250612155610.473593-1-felix.moessbauer@siemens.com> MIME-Version: 1.0 X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-1321639:519-21489:flowmailer X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm2 header.b=qMqPPTCC; spf=pass (google.com: domain of fm-1321639-20250612155633a5190c72d4abef53c0-h2rzcf@rts-flowmailer.siemens.com designates 185.136.64.226 as permitted sender) smtp.mailfrom=fm-1321639-20250612155633a5190c72d4abef53c0-H2rzCf@rts-flowmailer.siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Content-Type: text/plain; charset="UTF-8" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: 80+6vsoIGza4 When hashing the password, the whole openssl command was passed as a shell string instead of directly passing the individual arguments as-is. Further, the arguments were not shell escaped. By that, passwords containing a string were split into two individual arguments, breaking the command (or silently set a different password if the remainder itself was a valid argument). We fix this by passing the arguments as-is (as list) to bb.process.run. Fixes: 6144daf9 ("image-account-extension: Avoid deprecated crypt...") Reported-by: Clara Kowalsky Signed-off-by: Felix Moessbauer --- meta/classes/image-account-extension.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/image-account-extension.bbclass b/meta/classes/image-account-extension.bbclass index 3c461b1a..25288e76 100644 --- a/meta/classes/image-account-extension.bbclass +++ b/meta/classes/image-account-extension.bbclass @@ -133,7 +133,7 @@ def image_create_users(d: "DataSmart") -> None: source_date_epoch = d.getVar("SOURCE_DATE_EPOCH") command.append("-e") salt = hashlib.sha256("{}\n".format(source_date_epoch).encode()).hexdigest()[0:15] - password = bb.process.run('openssl passwd -6 --salt {} {}'.format(salt, password))[0].strip() + password = bb.process.run(['openssl', 'passwd', '-6', '--salt', salt, password])[0].strip() else: command.append("-e") -- 2.49.0 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20250612155610.473593-1-felix.moessbauer%40siemens.com.