From 71de89043159d6b20056e5dd95c7ea82352a8c06 Mon Sep 17 00:00:00 2001 From: Hossy Date: Tue, 19 Jul 2022 19:54:15 -0500 Subject: [PATCH] Fix commit to be a partial admin-focused commit Issue #4197 -- Commit currently commits all pending changes to the firewall, which could be very, very bad. This changes to commit to a partial commit of just the admin user acme.sh is using, which should be a dedicated admin user and not shared by anything else. --- deploy/panos.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/deploy/panos.sh b/deploy/panos.sh index ef622ded..f2f94488 100644 --- a/deploy/panos.sh +++ b/deploy/panos.sh @@ -71,8 +71,8 @@ deployer() { if [ "$type" = 'commit' ]; then export _H1="Content-Type: application/x-www-form-urlencoded" - cmd=$(printf "%s" "<$_panos_user>" | _url_encode) - content="type=commit&key=$_panos_key&cmd=$cmd" + cmd=$(printf "%s" "$_panos_user" | _url_encode) + content="type=commit&action=partial&key=$_panos_key&cmd=$cmd" fi response=$(_post "$content" "$panos_url" "" "POST") parse_response "$response" "$type"