Daniel Golle 267873ac9b base-files: don't evaluate block-device uevent ... Current code and also before commit da52dd0c83 was vulnerable to shell injection using volume lables in the GPT partition table of block devices. Given that partition names can be freely defined in GPT tables we really shouldn't evaluate a string which is potentially crafted with evil intentions. Hence rather use `export -n` to absorb the uevent's variables into the environment. Fixes commit da52dd0c83 (base-files: quote values when evaluating uevent) Signed-off-by: Daniel Golle <daniel@makrotopia.org> [mschiffer@universe-factory.net: suggested export -n usage]		2018-02-13 00:01:44 +01:00
..
bin	linux-atm: add br2684ctl option to specify the netdev name	2018-01-10 08:08:53 +01:00
etc	base-files: gpio switch: check if direction can be set	2018-01-18 07:22:37 +01:00
lib	base-files: don't evaluate block-device uevent	2018-02-13 00:01:44 +01:00
rom	rename default/ to files/	2006-11-22 23:30:57 +00:00
sbin	base-files: sysupgrade: correct command help text	2018-01-12 16:06:04 +01:00
usr	base-files: remove remaining uses of %N, and drop VERSION_NICK config symbol	2017-12-09 23:27:41 +01:00