On 1 Sep 2020, at 21:36, Ken Cunningham wrote:

The thing to do with bash is link it statically — then it can never break.

I do this on all older systems, and then copy it into /bin/bash

If you're doing this to fix the actual serious vulnerabilities in older bash (e.g. shellshock) you should also replace /bin/sh, which is the POSIX-required system shell that is used explicitly in some circumstances (e.g. boot time.) This is especially important if you're crazy enough to expose such an antique machine to the net.

see <https://github.com/kencu/myports/blob/master/shells/bash/> if you need inspiration.

I've seen that egregious hack somewhere before...

--
Bill Cole
[email protected] or [email protected]
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not For Hire (currently)

Reply via email to