Security hardening: fix possible shell injection vulnerability
Security hardening: fix possible shell injection vulnerability

The glance/cmd/control.py file contains a possible shell injection
vulnerability:

https://github.com/openstack/glance/blob/master/glance/cmd/control.py#L134 .

Setting 'shell=True' here opens the possibility of shell injection
by setting server to something like '; rm -rf /'. This will cause
the command 'rm -rf /' to be run with the privileges of the user
that ran Glance.

The fix is to parameterize the input so that the command run here
can only be 'logger'.

Change-Id: If48106ceea1dd582bcec9d03e056d88591bcba8d
Closes-bug: 1335208

saeki-masaki/glance,wkoathp/glance,scripnichenko/glance,ozamiatin/glance,takeshineshiro/glance,klmitch/glance,JioCloud/glance,openstack/glance,darren-wang/gl,openstack/glance,openstack/glance,ozamiatin/glance,rajalokan/glance,akash1808/glance,vuntz/glance,stevelle/glance,scripnichenko/glance,akash1808/glance,paramite/glance,stevelle/glance,sigmavirus24/glance,jumpstarter-io/glance,JioCloud/glance,saeki-masaki/glance,kfwang/Glance-OVA-OVF,kfwang/Glance-OVA-OVF,dims/glance,jumpstarter-io/glance,sigmavirus24/glance,redhat-openstack/glance,paramite/glance,dims/glance,klmitch/glance,darren-wang/gl,wkoathp/glance,takeshineshiro/glance,redhat-openstack/glance,rajalokan/glance,vuntz/glance