Xymon Mailing List Archive search

'Shell shock' mitigation

list Ryan Novosielski
Fri, 26 Sep 2014 17:57:02 -0400
Message-Id: <user-45ea22cbc36c@xymon.invalid>

Yes, Debian as well. At least on 6.0.

--
____ *Note: UMDNJ is now Rutgers-Biomedical and Health Sciences*
|| \\UTGERS      |---------------------*O*---------------------
||_// Biomedical | Ryan Novosielski - Senior Technologist
|| \\ and Health | user-46c89e614701@xymon.invalid<mailto:user-46c89e614701@xymon.invalid>- 973/972.0922 (2x0922)
||  \\  Sciences | OIRT/High Perf & Res Comp - MSB C630, Newark
    `'

On Sep 26, 2014, at 17:03, Galen Johnson <user-87f955643e3d@xymon.invalid<mailto:user-87f955643e3d@xymon.invalid>> wrote:

Ubuntu (and maybe debian) links sh to dash...I've not seen dash used on other linux systems I've used.

=G=

From: Xymon <xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com>> on behalf of Another Xymon User <user-b71bfe4edfbc@xymon.invalid<mailto:user-b71bfe4edfbc@xymon.invalid>>
Sent: Friday, September 26, 2014 12:36 PM
To: xymon at xymon.com<mailto:xymon at xymon.com>
Subject: Re: [Xymon] 'Shell shock' mitigation


? Just checked fully patched RHEL5, RHEL6, and Fedora 20 systems and found sh linked to bash on all.


On 2014-09-26 10:54, Henrik Størner wrote:

Fortunately, most Linux systems I know of have /bin/sh linked to /bin/dash and hence are not vulnerable.