kev/Onionr
1
0
Fork 0
Code Issues 24 Pull Requests Projects Releases 2 Wiki Activity

fix ofexec auditor docstrings

Browse Source
This commit is contained in:
Kevin Froman 2019-12-19 23:22:51 -06:00
parent 906219fe30
commit f5a98fba13
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/bigbrother/ministry/ofexec.py
View File

@ -1,7 +1,6 @@
"""
Onionr - Private P2P Communication
"""Onionr - Private P2P Communication.
Prevent eval/exec/os.system and log it
Prevent eval/exec/os.system and log it
"""
import base64
import platform
@ -26,6 +25,7 @@ from onionrexceptions import ArbitraryCodeExec
def block_system(cmd):
"""Prevent os.system except for whitelisted commands+contexts."""
allowed = 'taskkill /PID '
is_ok = False
if platform.platform == 'Windows':
@ -42,8 +42,7 @@ def block_system(cmd):
def block_exec(event, info):
"""Prevent arbitrary code execution in eval/exec and log it
"""
"""Prevent arbitrary code execution in eval/exec and log it."""
# because libraries have stupid amounts of compile/exec/eval,
# We have to use a whitelist where it can be tolerated
whitelisted_code = [