core-admin-client/qubesadmin
Jean-Philippe Ouellet 87230fc042
Stop leaking terminal escapes via stderr
This restores Qubes R3.2 behavior

Before this patch, the following:

    qvm-run -p sys-firewall 'echo -e "\e[0;46mcyan!" >&2' | wc -l

leaks the escape sequences through to the dom0 terminal via stderr,
in this case demonstrated by the ability to change the text color while
it should be fixed to red.

This can also be abused with xterm reporting sequences to cause input
to be sent to the dom0 terminal. This is potentially a security issue.
2017-11-20 23:33:44 -05:00
..
backup backup: fix handling labels in Qubes 4.0 backups 2017-10-29 02:58:37 +02:00
events events: ignore events from non-existing domains 2017-09-20 20:19:38 +02:00
tests tools/qvm-shutdown: fix handling shutdown timeout for multiple VMs 2017-10-28 22:40:24 +02:00
tools Merge remote-tracking branch 'qubesos/pr/38' 2017-11-20 13:04:42 +01:00
vm vm: fix handling policy deny on admin.vm.List 2017-10-16 01:32:56 +02:00
__init__.py Choose QubesLocal or QubesRemote based on /etc/qubes-release presence 2017-07-18 01:58:33 +02:00
app.py Stop leaking terminal escapes via stderr 2017-11-20 23:33:44 -05:00
base.py replace key in dir(self) with faster and better code 2017-11-10 16:31:45 +01:00
config.py tools: add qvm-template-postprocess 2017-05-26 01:33:43 +02:00
devices.py Fix DeviceInfo objects comparing 2017-10-17 20:40:16 +02:00
exc.py Improve QubesDaemonNoResponseError error message 2017-08-12 15:15:52 +02:00
features.py features: serialize True as '1' 2017-07-28 13:56:05 +02:00
firewall.py firewall: fix handling DstHost.prefixlen=0 2017-07-17 20:28:22 +02:00
label.py Rename Mgmt API to Admin API: methods names 2017-05-12 19:36:03 +02:00
log.py Drop log.DBusHandler 2017-10-16 01:33:03 +02:00
spinner.py qubesadmin/spinner: fix licence 2017-06-08 08:12:58 +02:00
storage.py storage: drop 'internal' volume property 2017-07-21 03:10:01 +02:00
tags.py tags support 2017-06-20 01:34:16 +02:00
utils.py don't import pkg_resources in the top of qubesadmin/utils.py 2017-11-10 16:31:45 +01:00