From 1221448029be6b0cd3553e48a18982baaefad29d Mon Sep 17 00:00:00 2001
From: Airene Fang <linfanne@gmail.com>
Date: Sat, 18 Apr 2026 19:33:32 +0800
Subject: [PATCH] =?UTF-8?q?fix(scripts):=20Cloud=20Provider=20Reports=20Se?=
 =?UTF-8?q?curity=20Issue=EF=BC=88aliyun=20could=EF=BC=89=20(#2323)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

ATT&CK矩阵ID：T1059.004
数据来源：进程启动触发检测
告警原因：该进程的命令行显示出反弹shelI的特征
命令行：timeout 1 bash -c exec 3<>/dev/tcp/127.0.0.1/2024
进程路径：/usr/bin/timeout
进程链：-［337650］ /usr/sbin/sshd -D
-［397971］ /usr/sbin/sshd -D -R
-［397977］-bash
-［398903］ make dev
-［398920］ bash ./scripts/serve.sh --dev
-［399037］bash ./scripts/wait-for-port.sh 2024 60 LangGraph
---
 scripts/wait-for-port.sh | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/scripts/wait-for-port.sh b/scripts/wait-for-port.sh
index 198c3d0de..dc0dffa1d 100755
--- a/scripts/wait-for-port.sh
+++ b/scripts/wait-for-port.sh
@@ -39,11 +39,6 @@ is_port_listening() {
         fi
     fi
 
-    if command -v timeout >/dev/null 2>&1; then
-        timeout 1 bash -c "exec 3<>/dev/tcp/127.0.0.1/$PORT" >/dev/null 2>&1
-        return $?
-    fi
-
     return 1
 }