Azure / Azure/azure-linux-extensions

Decrypting protected settings use hardcoded filename for storage.

Open
#157 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
333
Forks
278
Avg merge
2d 9h
Merged PRs (30d)
4

Description

Hi,

While looking through the code to decrypt the protectedSettings from the ExtensionConfig, I found the filename "/tmp/kk" is used to store the decoded base64 protectedSettings.

I suggest to use tempfile.TemporaryFile to create a tempfile to be used.

Lines can be viewed here:

[Utils/HandlerUtil.py#L130-L133](https://github.com/Azure/azure-linux-extensions/blob/965923b28a5e7b8f669849d5f2b63489c3275a3f/Utils/HandlerUtil.py#L130-L133)

It will take me some time to make a PR request, as I have other priorities at the moment.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start in Utils/HandlerUtil.py at lines 130-133 and trace how protectedSettings are decoded and stored. Replace the hardcoded /tmp/kk storage with a temporary-file approach, then verify that decryption still reads the decoded settings and leaves no fixed filename in use.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.