Xymon Mailing List Archive search

'Shell shock' mitigation

list Japheth Cleaver
Fri, 26 Sep 2014 16:33:16 -0700
Message-Id: <user-65aa99d4d7ed@xymon.invalid>

/bin/sh to /bin/bash is standard on Red Hat-derived systems.

dash is present as a package in RHEL6 and Fedora, but not EL7 or EL5.
Prior to that (<=EL4) 'ash' was available.

-jc


On Fri, September 26, 2014 2:03 pm, Galen Johnson wrote:
Ubuntu (and maybe debian) links sh to dash...I've not seen dash used on
other linux systems I've used.
From: Xymon <xymon-bounces at xymon.com> on behalf of Another Xymon User
<user-b71bfe4edfbc@xymon.invalid>
Sent: Friday, September 26, 2014 12:36 PM
To: xymon at xymon.com
Subject: Re: [Xymon] 'Shell shock' mitigation


? Just checked fully patched RHEL5, RHEL6, and Fedora 20 systems and found
sh linked to bash on all.
On 2014-09-26 10:54, Henrik St?rner wrote:

Fortunately, most Linux systems I know of have /bin/sh linked to /bin/dash
and hence are not vulnerable.