sonic-buildimage-msft/platform/broadcom/sonic-platform-modules-dell/n3248pxe
Mai Bui 06e1a0bc14
[device/dell] Mitigation for security vulnerability (#11875)
Dependency: [PR (#12065)](https://github.com/sonic-net/sonic-buildimage/pull/12065) needs to merge first.

#### Why I did it
`commands` module is not protected against malicious input
`getstatusoutput` is detected without a static string, uses `shell=True`
#### How I did it
Eliminate the use of `commands`
Use `subprocess.run()`, commands in `subprorcess.run()` are totally static
Fix indentation
#### How to verify it
Tested on DUT
[dell_log.txt](https://github.com/sonic-net/sonic-buildimage/files/9561332/dell_log.txt)
2023-01-05 16:22:09 -08:00
..
cfg DellEMC: N3248PXE Initial platform commit (#8562) 2021-09-25 15:35:16 -07:00
modules DellEMC: N3248TE/N3248PXE Watchdog Support (#9398) 2022-04-01 07:33:08 -07:00
scripts Upgrade new DellEMC platforms to bullseye kernel (#10) 2021-11-10 15:27:22 -08:00
sonic_platform [device/dell] Mitigation for security vulnerability (#11875) 2023-01-05 16:22:09 -08:00
systemd DellEMC: N3248PXE Initial platform commit (#8562) 2021-09-25 15:35:16 -07:00
setup.py DellEMC: N3248PXE Initial platform commit (#8562) 2021-09-25 15:35:16 -07:00