Merge ~rayveldkamp/qa-regression-testing:tests/dockerio-cve-2021-41092 into qa-regression-testing:master
Proposed by
Ray Veldkamp
Status: | Merged |
---|---|
Merged at revision: | 3ca1f6aab4e2e2e581ae6d1568659902e40380cf |
Proposed branch: | ~rayveldkamp/qa-regression-testing:tests/dockerio-cve-2021-41092 |
Merge into: | qa-regression-testing:master |
Diff against target: |
164 lines (+106/-2) 1 file modified
scripts/test-docker.io.py (+106/-2) |
Related bugs: |
Reviewer | Review Type | Date Requested | Status |
---|---|---|---|
Steve Beattie (community) | Approve | ||
Review via email:
|
Commit message
Add a regression test for CVE-2021-41092 to ensure that bad local
credential store configurations, don't result in login attempts to
registry-
certificate, for hosting a local HTTPS server for testing.
To post a comment you must log in.
There was an error fetching revisions from git servers. Please try again in a few minutes. If the problem persists, contact Launchpad support.
On Thu, Nov 04, 2021 at 05:40:46AM -0000, Ray Veldkamp wrote: hosts_file( entry): call([' sed', '-i', '$ a {0}'.format(entry), "/etc/hosts"])
> +def update_
> + '''Add an entry to the END of the system /etc/hosts file. No validation is performed on the entry being inserted.'''
> + subprocess.
Most of this looks good to me, but I'm a bit surprised to shell out to sed
to add a new line to a file; it is impressive it fits in one line, though
:)