opnsense-src/libexec/nuageinit
Baptiste Daroussin 2ebec3c7ea nuageinit: fix command injection and related issues
- Add shell_escape() helper to safely escape shell arguments
- Apply shell_escape to all user-controlled values in shell commands:
  adduser (usershow, useradd, lock, primary_group, groups)
  addgroup (groupshow, groupadd, members)
  exec_change_password (usermod)
  settimezone (tzsetup root and timezone)
  install_package (pkg package names)
- Escape double quotes in hostname when writing rc.conf.d/hostname
- Add missing 'local' declaration for resolvconf_command in nameservers()
- Escape interface name in resolvconf -a command
- Change open_resolvconf_conf() from 'w' to 'a' mode to prevent
  data loss when nameservers() is called multiple times
- Clean up stale resolvconf.conf at the start of each boot
  (skip on postnet to preserve config written by first call)

Approved by:	re (cperciva)
MFC After: 1 day

(cherry picked from commit 8b70a203be10411c560ed303ab25713d70b316e9)
(cherry picked from commit 87b18b611ec9a70347fdd239345fa23977bcb2d0)
2026-05-14 12:06:56 -07:00
..
tests nuageinit: fix command injection and related issues 2026-05-14 12:06:56 -07:00
Makefile nuageinit: use lyaml to parse yaml files 2025-06-26 09:24:15 +02:00
Makefile.depend Update Makefile.depend files 2024-10-14 10:26:17 -07:00
nuage.lua nuageinit: fix command injection and related issues 2026-05-14 12:06:56 -07:00
nuageinit nuageinit: fix command injection and related issues 2026-05-14 12:06:56 -07:00
nuageinit.7 nuageinit.7: fix cloud-config header line 2026-03-20 12:32:57 -04:00