[Xymon] 'Shell shock' mitigation

[J.C. Cleaver]

/bin/sh to /bin/bash is standard on Red Hat-derived systems.

dash is present as a package in RHEL6 and Fedora, but not EL7 or EL5.
Prior to that (<=EL4) 'ash' was available.

-jc



On Fri, September 26, 2014 2:03 pm, Galen Johnson wrote:
> Ubuntu (and maybe debian) links sh to dash...I've not seen dash used on
> other linux systems I've used.

> ________________________________
> From: Xymon <xymon-bounces at xymon.com> on behalf of Another Xymon User
> <xymon at epperson.homelinux.net>
> Sent: Friday, September 26, 2014 12:36 PM
> To: xymon at xymon.com
> Subject: Re: [Xymon] 'Shell shock' mitigation
>
>
> ? Just checked fully patched RHEL5, RHEL6, and Fedora 20 systems and found
> sh linked to bash on all.
>

>
> On 2014-09-26 10:54, Henrik St?rner wrote:
>
> Fortunately, most Linux systems I know of have /bin/sh linked to /bin/dash
> and hence are not vulnerable.