[node-patches] Change in ovirt-node[master]: Making the install device selection page use only disk devices.

[tlitovsk at redhat.com]

Anatoly Litovsky has posted comments on this change.

Change subject: Making the install device selection page use only disk devices.
......................................................................


Patch Set 2: -Verified

(1 comment)

http://gerrit.ovirt.org/#/c/37043/2/src/ovirt/node/utils/storage.py
File src/ovirt/node/utils/storage.py:

Line 135:             dev = translate_multipath_device(_dev)
Line 136:             self.logger.debug("Checking device %s (%s)" % (dev, _dev))
Line 137:             disk_type_cmd = "lsblk -ino TYPE %s --nodeps" % dev
Line 138:             disk_type_popen = subprocess_closefds(disk_type_cmd,
Line 139:                                                   shell=True,
> Is it possible to use somehow shell=False? to avoid possible shell injectio
No it doesnt work then :-(
But it only runs in our installation so I dont think shell injection should be a problem here
Line 140:                                                   stdout=subprocess.PIPE,
Line 141:                                                   stderr=subprocess.STDOUT)
Line 142:             dev_type, dev_type_err = disk_type_popen.communicate()
Line 143:             if dev_type.strip() != "disk":


-- 
To view, visit http://gerrit.ovirt.org/37043
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: If1e398ff28b984093163c13c13af125eb7428bec
Gerrit-PatchSet: 2
Gerrit-Project: ovirt-node
Gerrit-Branch: master
Gerrit-Owner: Anatoly Litovsky <tlitovsk at redhat.com>
Gerrit-Reviewer: Anatoly Litovsky <tlitovsk at redhat.com>
Gerrit-Reviewer: Douglas Schilling Landgraf <dougsland at redhat.com>
Gerrit-Reviewer: Fabian Deutsch <fabiand at redhat.com>
Gerrit-Reviewer: automation at ovirt.org
Gerrit-Reviewer: oVirt Jenkins CI Server
Gerrit-HasComments: Yes