HeuJung 2fb452aa44
fix(security): 스케줄 셸 인터프리터 인라인 코드 우회 차단 ...
셸 스케줄 검증이 첫 토큰 basename 만 화이트리스트와 대조하고 뒤 인자를
검증하지 않아, 운영자가 bash 를 등록하면 `bash -c id` 로 임의 OS 명령이
실행됐다(KVE-2026-1653). 인터프리터는 범용 크론 용도로 등록을 허용하되,
스크립트 자리(첫 인자)에 형태 규칙을 적용해 인라인 코드·상대경로·트래버설·
artisan 우회·완전거부형(env/awk/make 등)을 저장·실행 양쪽에서 거부한다.
2026-08-17 20:59:42 +09:00
2026-08-06 12:58:59 +09:00
2026-08-02 15:29:29 +09:00
2026-08-17 13:22:48 +09:00
2026-04-01 10:30:52 +09:00
2026-05-11 11:29:41 +09:00
2026-07-06 17:15:29 +09:00
2026-08-12 10:53:04 +09:00
2026-07-01 10:30:32 +09:00
2026-04-20 20:37:49 +09:00
2026-07-19 20:13:05 +09:00
2026-04-20 20:37:49 +09:00
2026-04-23 17:36:31 +09:00
2026-08-17 13:22:48 +09:00
2026-08-06 14:16:40 +09:00
2026-08-06 11:13:51 +09:00
2026-08-04 17:48:05 +09:00
2026-07-30 07:52:24 +09:00
2026-08-06 11:13:51 +09:00
2026-08-06 11:13:51 +09:00
2026-04-01 10:30:52 +09:00
2026-04-20 20:37:49 +09:00
2026-08-14 08:05:54 +09:00
2026-08-10 16:28:03 +09:00
2026-08-14 11:06:25 +09:00
2026-08-14 11:06:25 +09:00
2026-05-11 11:29:41 +09:00
2026-08-05 21:20:05 +09:00
2026-07-23 13:04:59 +09:00
2026-08-17 15:46:38 +09:00
2026-08-14 17:28:49 +09:00
2026-08-17 20:59:42 +09:00
2026-08-17 20:59:42 +09:00
2026-08-02 18:35:28 +09:00
2026-08-02 18:35:28 +09:00
2026-07-27 10:03:06 +09:00
2026-04-20 20:37:49 +09:00
2026-04-01 10:30:52 +09:00
2026-08-06 11:13:54 +09:00
2026-08-05 21:20:05 +09:00
2026-04-01 10:30:52 +09:00
2026-04-01 10:30:52 +09:00
2026-04-01 10:30:52 +09:00
2026-04-01 10:30:52 +09:00
2026-08-14 08:05:54 +09:00
2026-08-06 12:36:31 +09:00
HeuJung
2fb452aa44