Skip to content

exec: docs - added security warning#3338

Merged
miconda merged 1 commit intokamailio:masterfrom
EnableSecurity:master
Jan 23, 2023
Merged

exec: docs - added security warning#3338
miconda merged 1 commit intokamailio:masterfrom
EnableSecurity:master

Conversation

@sandrogauci
Copy link
Contributor

  • Added warning about potential for OS Command Injection
  • Updated invalid examples

previous example gives the following error:
pv_parse_spec2(): error searching pvar "rU.txt"

Pre-Submission Checklist

  • Commit message has the format required by CONTRIBUTING guide
  • Commits are split per component (core, individual modules, libs, utils, ...)
  • Each component has a single commit (if not, squash them into one commit)
  • No commits to README files for modules (changes must be done to docbook files
    in doc/ subfolder, the README file is autogenerated)

Type Of Change

  • Small bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds new functionality)
  • Breaking change (fix or feature that would change existing functionality)

Checklist:

  • PR should be backported to stable branches
  • Tested changes locally
  • Related to issue #XXXX (replace XXXX with an open issue number)

Description

Misuse of the exec module functions is a security concern. This PR updates the documentation to help Kamailio administrators use these functions securely.

- Added warning about potential for OS Command Injection
- Updated invalid examples

previous example gives the following error:
pv_parse_spec2(): error searching pvar "rU.txt"
@miconda
Copy link
Member

miconda commented Jan 23, 2023

Thanks!

@miconda miconda merged commit f81f0e7 into kamailio:master Jan 23, 2023
Copy link

@Jonnypleasehelp Jonnypleasehelp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks

Copy link

@Jonnypleasehelp Jonnypleasehelp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes I am learning as we go along it's all new language for me

@kamailio kamailio deleted a comment from Jonnypleasehelp Jan 26, 2023
@kamailio kamailio deleted a comment from Jonnypleasehelp Jan 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants