Skip to content

v0.1.2

Latest

Choose a tag to compare

@nmuellerdo nmuellerdo released this 16 Jul 12:27

Security and robustness fix for the interactive menu. Recommended update from v0.1.0 / v0.1.1.

  • Fixed a command-execution path: the menu row selection was evaluated as a bash arithmetic array subscript, so input like 0,R_ENC[$(cmd)] could run cmd as root. Row input is now validated as a plain base-10 index.
  • Malformed input (08, 1x, ...) no longer crashes the menu, and a leading zero is no longer parsed as octal (which toggled the wrong slot).
  • ident / fault / off-all now fail with a clear message when no enclosure slots can be read, instead of a misleading "Target not found" under --dry-run.
  • discover_enclosures ignores lsscsi lines without a real /dev/sg node; dropped the undocumented menu alias.

This matters most if the tool is whitelisted in sudoers. See CHANGELOG.md.