Workflow Warning - "Allowing arbitrary command for pre-processing is a security concern"

Forum|Forum|4 years ago
December 30, 2021
1 reply
2502 views

Hi Team,

I am able see the following warning in one of my workflow : "Allowing arbitrary command for pre-processing is a security concern".

Please provide your thoughts to fix the warning.

Thanks,

Gangadhar

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

Best answer by ShrawanSaxena-1

Hi Gangadhar,

This is related to security enhancement from the 19.1 release onwards. You can no longer insert arbitrary commands when using the Pre-process the file option in a Data loading (file) workflow activity. A drop-down list is now available allowing you to select from 3 options: None, Decompression (zcat) or Decrypt (gpg). The XtkSecurity_Disable_Preproc security flag has been added. For new customers, this option will be set to 0. For existing customers, this option will be set to 1 by the postupgrade in order to keep the previous behavior. Refer to this section.

https://experienceleague.adobe.com/docs/campaign-classic/using/release-notes/previous-releases/release--2019.html?lang=en#release-19-1-build-9026

ShrawanSaxena-1

Accepted solution

Adobe Employee

Hi Gangadhar,

This is related to security enhancement from the 19.1 release onwards. You can no longer insert arbitrary commands when using the Pre-process the file option in a Data loading (file) workflow activity. A drop-down list is now available allowing you to select from 3 options: None, Decompression (zcat) or Decrypt (gpg). The XtkSecurity_Disable_Preproc security flag has been added. For new customers, this option will be set to 0. For existing customers, this option will be set to 1 by the postupgrade in order to keep the previous behavior. Refer to this section.

https://experienceleague.adobe.com/docs/campaign-classic/using/release-notes/previous-releases/release--2019.html?lang=en#release-19-1-build-9026