This article is written for people who don`t want to update to Nexenta 4 but still need to fix the Shellshock bug. The procedure is quite simple and I will describe bellow exactly what you need to do.<\/p>\n
Connect to you nexenta server with root and type !bash, after that press Y.<\/p>\n
nmc@nexenta:\/$ option expert_mode=1
\nnmc@nexenta:\/$ !bash
\nYou are about to enter the Unix (“raw”) shell and execute low-level Unix command(s). Warning: using low-level Unix commands is not recommended! Execute? (y\/n)<\/p>\n
cd ~
\n# Modify apt sources
\nvi \/etc\/apt\/sources.list<\/p>\n
deb http:\/\/apt.nexentastor.org\/3.1 hardy-testing main contrib non-free
\ndeb-src http:\/\/apt.nexentastor.org\/3.1 hardy-testing main contrib non-free<\/p>\n
# Install gcc and bison in order to be able to compile bash
\napt-get update
\napt-get install gcc
\napt-get install bison<\/p>\n
# Download bash version 3.2, this is used on nexenta 3.1.5. ash-3.2.48.tar.gz is patched till version 48
\nwget http:\/\/ftp.gnu.org\/gnu\/bash\/bash-3.2.48.tar.gz<\/p>\n
# Download all patches after bash32-048 (at the moment I publish this article, latest is bash32-057)
\nmkdir bash-3.2-patches
\ncd bash-3.2-patches
\nwget http:\/\/ftp.gnu.org\/gnu\/bash\/bash-3.2-patches\/bash32-049
\nwget http:\/\/ftp.gnu.org\/gnu\/bash\/bash-3.2-patches\/bash32-050
\nwget http:\/\/ftp.gnu.org\/gnu\/bash\/bash-3.2-patches\/bash32-051
\nwget http:\/\/ftp.gnu.org\/gnu\/bash\/bash-3.2-patches\/bash32-052
\nwget http:\/\/ftp.gnu.org\/gnu\/bash\/bash-3.2-patches\/bash32-053
\nwget http:\/\/ftp.gnu.org\/gnu\/bash\/bash-3.2-patches\/bash32-054
\nwget http:\/\/ftp.gnu.org\/gnu\/bash\/bash-3.2-patches\/bash32-055
\nwget http:\/\/ftp.gnu.org\/gnu\/bash\/bash-3.2-patches\/bash32-056
\nwget http:\/\/ftp.gnu.org\/gnu\/bash\/bash-3.2-patches\/bash32-057
\ncd ..<\/p>\n
# Go to bash source folder and patch the source
\ntar -xvzf bash-3.2.48.tar.gz
\ncd bash-3.2.48
\npatch -p0 < \/root\/bash-3.2-patches\/bash32-049
\npatch -p0 < \/root\/bash-3.2-patches\/bash32-050
\npatch -p0 < \/root\/bash-3.2-patches\/bash32-051
\npatch -p0 < \/root\/bash-3.2-patches\/bash32-052
\npatch -p0 < \/root\/bash-3.2-patches\/bash32-053
\npatch -p0 < \/root\/bash-3.2-patches\/bash32-054
\npatch -p0 < \/root\/bash-3.2-patches\/bash32-055
\npatch -p0 < \/root\/bash-3.2-patches\/bash32-056
\npatch -p0 < \/root\/bash-3.2-patches\/bash32-057<\/p>\n
# Compile
\n.\/configure
\nmake
\nmake install<\/p>\n
# Bash version should be now .57
\nroot@nexenta:~# bash –version
\nGNU bash, version 3.2.57(3)-release (i386-pc-solaris2.10)
\nCopyright (C) 2007 Free Software Foundation, Inc.<\/p>\n
# Test if your bash against Shellshock bug.
\nenv ‘VAR=() { :;}; echo Bash is vulnerable!’ ‘FUNCTION()=() { :;}; echo Bash is vulnerable!’ bash -c “echo Bash is not vulnerable”<\/p>\n
# Example
\nroot@nexenta:~# env ‘VAR=() { :;}; echo Bash is vulnerable!’ ‘FUNCTION()=() { :;}; echo Bash is vulnerable!’ bash -c “echo Bash is not vulnerable”
\nBash is not vulnerable<\/p>\n
Verify every few days if new patches are released on http:\/\/ftp.gnu.org\/gnu\/bash\/bash-3.2-patches\/, a lot of security bugs probably will be fixed these days, as a lot of people is checking the code.<\/p>\n
p.s. thanks for suggestions from jb<\/p>\n","protected":false},"excerpt":{"rendered":"
This article is written for people who don`t want to update to Nexenta 4 but still need to fix the Shellshock bug. The procedure is quite simple and I.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[549,550,548,545,546,547],"class_list":["post-300","post","type-post","status-publish","format-standard","hentry","category-others","tag-3-1-5","tag-3-1-6","tag-bash","tag-nexenta","tag-nexentastor","tag-shellshock"],"_links":{"self":[{"href":"https:\/\/blog.syshalt.net\/index.php\/wp-json\/wp\/v2\/posts\/300","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.syshalt.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.syshalt.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.syshalt.net\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.syshalt.net\/index.php\/wp-json\/wp\/v2\/comments?post=300"}],"version-history":[{"count":14,"href":"https:\/\/blog.syshalt.net\/index.php\/wp-json\/wp\/v2\/posts\/300\/revisions"}],"predecessor-version":[{"id":356,"href":"https:\/\/blog.syshalt.net\/index.php\/wp-json\/wp\/v2\/posts\/300\/revisions\/356"}],"wp:attachment":[{"href":"https:\/\/blog.syshalt.net\/index.php\/wp-json\/wp\/v2\/media?parent=300"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.syshalt.net\/index.php\/wp-json\/wp\/v2\/categories?post=300"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.syshalt.net\/index.php\/wp-json\/wp\/v2\/tags?post=300"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}