Resolve "Code injection in the disk file path during archive"

common/log/SyslogLogger.cpp

@@ -66,7 +66,7 @@ void SyslogLogger::prepareForFork() {
 //-----------------------------------------------------------------------------
 void SyslogLogger::writeMsgToUnderlyingLoggingSystem(const std::string &header, const std::string &body) {
   // Explicitly ignore the message header as this will be provided by rsyslog
-  syslog(LOG_LOCAL3|INFO, body.c_str());
+  syslog(LOG_LOCAL3|INFO, "%s", body.c_str());
 }
 
 } // namespace log

continuousintegration/docker/ctafrontend/cc7/config/ctaeos/etc/sysconfig/eos

 # Should we run with another limit on the core file size other than the default?
-DAEMON_COREFILE_LIMIT=unlimited
+export DAEMON_COREFILE_LIMIT=unlimited
 
 # Disable the KRB5 replay cache
 export KRB5RCACHETYPE=none
@@ -9,7 +9,7 @@ export KRB5RCACHETYPE=none
 # e.g. /etc/sysconfig/xrd.<role>. The role based mechanism allows for
 # multiple xrd's running with different options to be controlled via
 # the same initd script
-XRD_ROLES="mq mgm fst"
+export XRD_ROLES="mq mgm fst"
 
 # ------------------------------------------------------------------
 # EOS Configuration
@@ -59,7 +59,10 @@ export EOS_TTY_BROACAST_EGREP="\"CRIT|ALERT|EMERG|PROGRESS\""
 export EOS_FST_DELETE_QUERY_INTERVAL=5
 
 # Tell clients that there is a CTA backend by starting the sitename with "cern_tape_archive_"
-XRDSITE=cern_tape_archive_ci
+export XRDSITE=cern_tape_archive_ci
 
 # Port to use for injecting into namespace using gRPC API
-EOS_MGM_GRPC_PORT=50051
+export EOS_MGM_GRPC_PORT=50051
+
+# Adds UTF8 support for exotic filenames
+export EOS_UTF8=""