https://github.com/apsl/salt-shellshock
Salt recipe for shellshock (CVE-2014-6271)
https://github.com/apsl/salt-shellshock
Last synced: 9 months ago
JSON representation
Salt recipe for shellshock (CVE-2014-6271)
- Host: GitHub
- URL: https://github.com/apsl/salt-shellshock
- Owner: APSL
- Created: 2014-09-26T10:30:37.000Z (over 11 years ago)
- Default Branch: master
- Last Pushed: 2014-09-26T11:04:53.000Z (over 11 years ago)
- Last Synced: 2025-06-07T02:40:39.891Z (about 1 year ago)
- Language: Shell
- Size: 112 KB
- Stars: 1
- Watchers: 7
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
======================
shellshock bash update
======================
This recipe tries to upgrade bash from OS pkg, and falls back to
compile bash on systems with no update available.
Works for us on old ubuntu/debian.
Bash install script from:
http://askubuntu.com/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-and-how-do-i-fix-it
Usage
=====
Can be used as an gitfs salt formula:
```yaml
fileserver_backend:
- roots
- git
gitfs_remotes:
- git://github.com/APSL/salt-shellshock.git
```
Runit:
```sh
$ sudo salt "oldubuntu" state.sls shellshock
```
---
bonus: Test shellshock from salt:
https://twitter.com/johan_moreau/status/515226448270213121
```
$ sudo salt -G 'kernel:Linux' cmd.run "env x='() { :;}; echo __bad' bash -c 'echo __good' 2>&1 |grep __"
```