Re: [OpenIndiana-discuss] Bash bug issue
On 26/09/2014 8:47 PM, Gary Gendel wrote:
The current maintainer says it's been in bash for ~20 years, why it's
not in Solaris 10 is a mystery.
It is in Solaris 10. (And 11.) The test being used is flawed:
env X=() { :;} ; echo busted /bin/sh -c echo completed
This just tests whether or not /bin/sh is vulnerable, and on Solaris
/bin/sh != /bin/bash (unless your admin is insane and dropped it in
place, which can't really be ruled out). On many (most? all?) Linuxes,
/bin/sh *is* /bin/bash.
So Solaris and derivatives have the bug, but the attack surface isn't
anywhere near as massive as on a Linux distribution. But if someone has
written scripts explicitly using /bin/bash, or if you have sudo
configurations that don't clean out the environment, you can get bitten.
___
openindiana-discuss mailing list
openindiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] pkg-update?
On 09/20/11 09:49 AM, Dan Swartzendruber wrote: Cool, thanks. Did the update create a BE automatically? It should, but even if it doesn't you can force it to do so, with --require-new-be as an argument to pkg image-update. (The upgrade docs also recommend setting a be name using --be-name, which is very helpful as well...) ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
Re: [OpenIndiana-discuss] How to replace a motherboard without reinstalling OpenIndiana
On 10/09/2011 10:24 AM, Robin Axelsson wrote: The problem is that the hardware on the new motherboard will most likely be located on PCI addresses that are different from the old one (with the possible exception of the GPU and the NB). From my experience, the installed drivers on OI will not be happy about it so my question is how can I reconfigure the drivers so that they use the pci addresses on the new motherboard? Did a reconfigure reboot (boot with -r) not work? ___ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
