Mai Bui

Hello, I tried to install the software but failed. Could you please see the error below and help? The system info is below: Python 3.8.5 ROS version: kinetic PyTorch: 1.7.1...

[sonic-config-engine] Replace os.system, replace yaml.load, remove subprocess with shell=True

1

Signed-off-by: maipbui #### Why I did it Missing import statement in PR https://github.com/sonic-net/sonic-buildimage/pull/12533 #### How I did it Revert [PR 12646](https://github.com/sonic-net/sonic-buildimage/pull/12616) Add import statement 1. https://github.com/sonic-net/sonic-buildimage/blob/31f7afa92e8d1e353ef2f3b004711dd18c0d94f6/src/sonic-config-engine/tests/test_j2files_t2_chassis_fe.py#L8 2. https://github.com/sonic-net/sonic-buildimage/blob/31f7afa92e8d1e353ef2f3b004711dd18c0d94f6/src/sonic-config-engine/tests/test_j2files.py#L8 3. https://github.com/sonic-net/sonic-buildimage/blob/31f7afa92e8d1e353ef2f3b004711dd18c0d94f6/src/sonic-config-engine/tests/test_multinpu_cfggen.py#L11...

Signed-off-by: maipbui #### Why I did it Test #### How I did it #### How to verify it #### Which release branch to backport (provide reason below if selected) -...

[sairedis] Replace memset functions

7

Signed-off-by: maipbui Why I did it `memset()` is an insecure function that can cause buffer overflow. `memset()` may not be called by the compiler. Due to compiler optimization: an optimizing...

Signed-off-by: maipbui #### What I did #### How I did it #### How to verify it #### Previous command output (if the output of a command-line utility has changed) ####...

Replace os.system and remove functions with shell=True

3

Signed-off-by: maipbui #### What I did 1. `subprocess()` - when using with `shell=True` is dangerous. Using subprocess function without a static string can lead to command injection. 2. `getstatusoutput` implementation...

Signed-off-by: maipbui #### What I did #### How I did it #### How to verify it #### Previous command output (if the output of a command-line utility has changed) ####...

SONiC Security Auditing HLD

7

This design aims to enhance the auditing capabilities within SONiC operating system using audit daemon (auditd). Auditing is the process of recording and analyzing the events that occur on the...

HLD https://github.com/sonic-net/SONiC/pull/1713 Microsoft ADO **(number only)**: 27951427 #### What I did Add Auditd CLI design #### How I did it #### How to verify it #### Previous command output (if...

[202205] Input check for timeout in generate_dump (#2925)

3

Cherry-pick #2925 ADO 28548370 #### What I did Added input check for argument "-t" in generate_dump script #### How I did it Made sure only integer values can be received...