Is it possible to use wildcards in the Whitelist as i use about 150 different “executeCommandLine” Calls in my rules and it would be a pain to Whitelist every one of it. I already use a firewall to restrict access to the API. UPDATE: all my “executeCommandLine” Calls in my rules are working (appare…

There is a link at the bottom of the page that will open the file in GitHub where you can edit and submit a PR. I’m pretty sure that link is working correctly again.

solved issue also for me. did this: created dir /etc/openhab2/misc created file exec.whitelist with nano and copied the commands from the log output into the file on linux with LF’s only → did not work modified it with notepad++ to CRLF on each line → did not work restarted OH system → did no…

I had to reboot openHAB and then the white list error message returned. It worked before the reboot and I didn’t change anything else. I then simply edited the white list in notepad++ and removed all LF symbols. Saved the new file and the exec command started working again.

I dont think the problem is with converting from CRLF to LF and back. What needs to be done in order for the commands in exec.whitelist to be executed, at least that works for me(tried several times) Shutdown openhab2 put your command in the exec.whitelist and ADD any character at the end an…

I don’t think you need to add and remove anything. Just save the file again after a restart. Depending on the editing tool maybe something needs to be added, anything, and immediately removed in order to force the editor to save. So sequence is: restart save file, even if no changes are made I…

[image] openHAB 2.5.x Patch Releases IMPORTANT NOTICE TO USERS OF THE EXEC BINDING: Due to this security advisory , the exec binding requires to have a whitelist of allowed commands to execute. Note that when updating the exec binding to version 2.5.2, it will stop functioning until you provide …

[image] shutterfreak: The documentation doesn’t tell exactly where the file misc/exec.whitelist should be located. For security reasons all commands need to be whitelisted. Allowed commands need to be added to the misc/exec.whitelist file in the configuration directory That looks clear t…

I added my commands to $OPENHAB_CONF/misc/exec.whitelist but still get the warning “it is not contained in whitelist”. The openhab2 service was restartet after adding the commands to white list. I use a hughe amount of commands (with different parameters). I want to revert to version 2.5.1. There…

Just save the whitelist again. No need for any changes but a save must be done after restart.

[image] m4rk: but a save must be done after restart. Do what happens for people that auto restart openhab2 once a month? Do we now need to create something to touch the file after a restart?

Security limitations in 2.5.2 exec binding

Add-ons Bindings

shutterfreak (Olivier Biot) February 20, 2020, 4:28pm 29

The documentation doesn’t tell exactly where the file misc/exec.whitelist should be located.

Is it supposed to be $OPENHAB_CONF/misc/exec.whitelist ?

EDIT: it appears it is indeeed $OPENHAB_CONF/misc/exec.whitelist.

openHAB 2.5.x Patch Releases