[device/delta] Mitigation for command injection vulnerability

[maipbui]

Why I did it

os execution functions are not secure against maliciously constructed input.

How I did it

Use subprocess module

How to verify it

Which release branch to backport (provide reason below if selected)

• 201811
• 201911
• 202006
• 202012
• 202106
• 202111
• 202205

Description for the changelog

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

[lgtm-com]

This pull request introduces 15 alerts and fixes 3 when merging f686fb6 into 178a30b - view on LGTM.com

new alerts:

• 9 for Wrong name for an argument in a class instantiation
• 6 for Unused import

fixed alerts:

• 3 for Unused import

[lgtm-com]

This pull request fixes 3 alerts when merging 1e0a2be into 35945c9 - view on LGTM.com

fixed alerts:

• 3 for Unused import

[lgtm-com]

This pull request introduces 1 alert and fixes 3 when merging 8fc3cae into 092e039 - view on LGTM.com

new alerts:

• 1 for Syntax error

fixed alerts:

• 3 for Unused import

[lgtm-com]

This pull request fixes 3 alerts when merging 264a5c5 into 092e039 - view on LGTM.com

fixed alerts:

• 3 for Unused import

[lgtm-com]

This pull request fixes 2 alerts when merging 13c7ed0 into 092e039 - view on LGTM.com

fixed alerts:

• 2 for Unused import

[lgtm-com]

This pull request fixes 2 alerts when merging fdd43b3 into c601f24 - view on LGTM.com

fixed alerts:

• 2 for Unused import

[qiluo-msft]

@hanstseng @zoe-kuan Could you help review and verify?

[lgtm-com]

This pull request fixes 2 alerts when merging 245e66d into 1f0699f - view on LGTM.com

fixed alerts:

• 2 for Unused import