Symptom

"run bash" command works even if "feature bash-shell" is disabled.

Conditions

Expected operation: The bash shell feature (i.e. the "run bash" exec command) is only enabled when the non-default "feature bash-shell" configuration is applied. The bash shell feature is disabled when the "no feature bash-shell" configuration is applied. Actual operation prior to CSCvp64129 fix: The bash shell feature (i.e. the "run bash" exec command) is always enabled, regardless of whether "feature bash-shell" or "no feature bash-shell" is configured.

Workaround

None. Note the "run bash" command is only available to users with network-admin role.

Further Problem Description