Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

USB Boot Maker comes with files which should be sanitized #35

Open
onebitboy opened this issue Oct 23, 2024 · 1 comment
Open

USB Boot Maker comes with files which should be sanitized #35

onebitboy opened this issue Oct 23, 2024 · 1 comment
Assignees
Labels

Comments

@onebitboy
Copy link

onebitboy commented Oct 23, 2024

Problem

The USB Boot Maker that comes with the SeaChest Utilities from https://www.seagate.com/support/software/seachest/ includes various files in the home directory for the tc user which shouldn't be in there, for example some previous shell history in .ash_history:

sudo updatedb
sudo nytrocli64 -listall
sudo nvme list
sudo /usr/local/etc/init.d/gpm stop
filetool.sh -b
setfont /home/tc/consolefonts/dejavusansmono-11x19.psfu.gz 
setfont
sudo SeaChest_Firmware --scan --echoCommandLine
filetool.sh -b

There's also some other files which should be deleted in the .config and .local directories within the home directory (e.g. Midnight Commander history).

Those files seem to be extracted during boot from /tce64/mydata_CLI64.tgz.

Expected behavior

No previous history and other user data should be included in the home directory.

How to reproduce

  1. Write image with USB Boot Maker.
  2. Boot from the created USB boot medium.
  3. Pressing Cursor Up shows shell commands which the user has never entered before.
  4. cd ~
  5. ls -la shows various files which should be sanitized before being included in the USB Boot Maker files.

Deployment information

Not relevant.

Additional information

No response

@shriya-deshmukh
Copy link

Thank you @onebitboy, for bringing this issue to our attention.
We have fixed it, and the fix will be included in our next release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants