Commit c293be3
committed
feat(security): harden subprocess execution, validate inputs
Resolve absolute paths for proxmox-backup-manager/proxmox-backup-debug and constrain PATH
Add stable locale for subprocesses and enforce timeouts for manager/list/show and debug/inspect
Introduce safe run_cmd with env/timeout and better timeout error reporting
Validate datastore names via regex; reject invalid identifiers
Add resolve_search_path to prevent path traversal; ensure paths stay under datastore root
Bump version to 2.4.1 and align README version
Rationale: reduce supply-chain and injection risks, prevent path escapes, and improve robustness on PBS Linux hosts1 parent 91660ff commit c293be3
3 files changed
Lines changed: 3 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
85 | 85 | | |
86 | 86 | | |
87 | 87 | | |
88 | | - | |
| 88 | + | |
89 | 89 | | |
90 | 90 | | |
91 | 91 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
10 | | - | |
| 10 | + | |
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
| |||
136 | 136 | | |
137 | 137 | | |
138 | 138 | | |
| 139 | + | |
139 | 140 | | |
140 | 141 | | |
141 | 142 | | |
| |||
Binary file not shown.
0 commit comments