summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJohn Estabrook <jestabro@vyos.io>2021-03-23 15:23:20 -0500
committerJohn Estabrook <jestabro@vyos.io>2021-05-14 10:03:22 -0500
commit7a705d2d60a0f6b8eeb742065d17039952255856 (patch)
treecc14f5e8305fd68659d3de01fb4df50ede7be80f
parentb0dd708e6e2fe3c488894141f120a013f43c897d (diff)
downloadvyos-1x-7a705d2d60a0f6b8eeb742065d17039952255856.tar.gz
vyos-1x-7a705d2d60a0f6b8eeb742065d17039952255856.zip
configd: T3426: check script name against include_set, not exclude_set
If the script name is mangled, for any reason (e.g. missing support for script arguments) checking against the exclude_set will yield a false positive; check against the include_set, even if this is a longer search. (cherry picked from commit 93c07ea1edff3f6f84285322b494a24b807ccc25)
-rwxr-xr-xsrc/services/vyos-configd2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/services/vyos-configd b/src/services/vyos-configd
index a4c982e2a..6004e9b95 100755
--- a/src/services/vyos-configd
+++ b/src/services/vyos-configd
@@ -218,7 +218,7 @@ def process_node_data(config, data) -> int:
logger.critical(f"Missing script_name")
return R_ERROR_DAEMON
- if script_name in exclude_set:
+ if script_name not in include_set:
return R_PASS
with stdout_redirected(session_out, session_mode):