diff options
| author | John Estabrook <jestabro@vyos.io> | 2021-03-23 15:23:20 -0500 |
|---|---|---|
| committer | John Estabrook <jestabro@vyos.io> | 2021-03-23 15:26:25 -0500 |
| commit | 93c07ea1edff3f6f84285322b494a24b807ccc25 (patch) | |
| tree | a65ca9bda3fe79eaa2df90e31c9bd5096c018c12 /src | |
| parent | ba251b3f2c9f7535b8fa3571dc3cc492387f078c (diff) | |
| download | vyos-1x-93c07ea1edff3f6f84285322b494a24b807ccc25.tar.gz vyos-1x-93c07ea1edff3f6f84285322b494a24b807ccc25.zip | |
configd: T3426: check script name against include_set, not exclude_set
If the script name is mangled, for any reason (e.g. missing support for
script arguments) checking against the exclude_set will yield a false
positive; check against the include_set, even if this is a longer
search.
Diffstat (limited to 'src')
| -rwxr-xr-x | src/services/vyos-configd | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/services/vyos-configd b/src/services/vyos-configd index a4c982e2a..6004e9b95 100755 --- a/src/services/vyos-configd +++ b/src/services/vyos-configd @@ -218,7 +218,7 @@ def process_node_data(config, data) -> int: logger.critical(f"Missing script_name") return R_ERROR_DAEMON - if script_name in exclude_set: + if script_name not in include_set: return R_PASS with stdout_redirected(session_out, session_mode): |