search

Seagate / ToolBin

All the great tools we have for the field.
127 stars 31 forks source link

USB Boot Maker comes with files which should be sanitized #35

Open onebitboy opened 1 month ago

onebitboy commented 1 month ago

Problem

The USB Boot Maker that comes with the SeaChest Utilities from https://www.seagate.com/support/software/seachest/ includes various files in the home directory for the tc user which shouldn't be in there, for example some previous shell history in .ash_history:

sudo updatedb
sudo nytrocli64 -listall
sudo nvme list
sudo /usr/local/etc/init.d/gpm stop
filetool.sh -b
setfont /home/tc/consolefonts/dejavusansmono-11x19.psfu.gz 
setfont
sudo SeaChest_Firmware --scan --echoCommandLine
filetool.sh -b

There's also some other files which should be deleted in the .config and .local directories within the home directory (e.g. Midnight Commander history).

Those files seem to be extracted during boot from /tce64/mydata_CLI64.tgz.

Expected behavior

No previous history and other user data should be included in the home directory.

How to reproduce

  1. Write image with USB Boot Maker.
  2. Boot from the created USB boot medium.
  3. Pressing Cursor Up shows shell commands which the user has never entered before.
  4. cd ~
  5. ls -la shows various files which should be sanitized before being included in the USB Boot Maker files.

Deployment information

Not relevant.

Additional information

No response

shriya-deshmukh commented 3 weeks ago

Thank you @onebitboy, for bringing this issue to our attention. We have fixed it, and the fix will be included in our next release.