Bash 'shellshock' bug is wormable

Re:Bash 'shellshock' bug is wormable by TeMPOraL on Thursday September 25, 2014 @08:08AM (#8366710)

Still, isn't sh quite often implemented as an alias/symlink for bash nowdays?

[ Parent | on HN ]

Re:Bash 'shellshock' bug is wormable by samuellb on Thursday September 25, 2014 @09:50AM (#8367089)

Yes, but Debian and Ubuntu has changed their default shell to Dash (in 2006 I think), and embedded systems usually use some lightweight shell such as BusyBox. So far from all systems do.

[ Parent | on HN ]

Re:Bash 'shellshock' bug is wormable by stephenr on Thursday September 25, 2014 @10:38AM (#8367382)

Just to clarify a little:

By default Debian still uses Bash for interactive user shells, but since Squeeze (early 2011), /bin/sh is provided by Dash.

Dash is used because it's faster than Bash and has less dependencies so its more resilient to failures.

for more info see https://wiki.debian.org/Shell, https://wiki.debian.org/DashAsBinSh and https://packages.debian.org/wheezy/dash

[ Parent | on HN ]

Re:Bash 'shellshock' bug is wormable by TeMPOraL on Thursday September 25, 2014 @09:56AM (#8367132)

Thanks for clarification!

[ Parent | on HN ]