<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I was reading this article found here --> <a href="https://nakedsecurity.sophos.com/2014/09/25/bash-shellshock-vulnerability-what-you-need-to-know/" target="_blank">https://nakedsecurity.sophos.com/2014/09/25/bash-shellshock-vulnerability-what-you-need-to-know/</a><br><br>John Harris stated:<br><br>Serious, yes, but still a Storm in a teacup here, Folks,<BR>
While it is being sorted out, switch over to the "MKSH" (MirBSD) shell.<br>
As it did not and does not use the GNU tool kit chain, it has not been built with the "readline" issue that exploits "Bash".<BR>
However, like "Bash" the "MKSH" shell supports almost all of the same
syntax and will run "Bash" scripts in a "SH" compatibility mode.<br>
The Korn shell is also very old and very well tested.<br>
I.E. HP, SUN, IBM, etc. all usually default to this command shell.<BR>
Unless you have something very "Bash" specific, MKSH" will do for now, if you are concerned.<br>
Anything else that does not require "Bash" specifically should be swapped over.<br>
Also please not that the "SH" command shell has the same problem as the "Bash" command shell.<br>
I would also be looking at any script that uses the "readline" function
or passes Unsanitized input or output to any "BASH" or "SH" shell.<BR>
One minor item, Google "Korn shell .profile and .kshrc" first, and
make sure that you update or create the equivalent of the
".bash_profile" and ".bashrc" before you swap your shell over.<BR>
Also, you can pretty much cut and paste most of your ".bash_profile" into ".profile" and it will work.<br>
For more advanced tricks, check out the "/etc/profile" script and the
"/etc/profile.d/" directory, as applicable, to your platform.<BR>
Linux & Unix built in workarounds to issues since their inception.<br>
Problem solved for now.<BR><br><BR>1. Can I migrate to MKSH shell on my LinuxMint17 computer quite easily?<br><BR>2. How necessary is this to be concerned about?<br><br>Your thoughts are appreciated. <br>Thank you,<br> </div></body>
</html>