
DEPRECATED: Chef cookbook to audit & remediate "Shellshock" (BASH-CVE-2014-7169)
This cookbook is designed to test and optionally remediate the bash "shellshock" bug, more formally known as cve-2014-7169.
Once Chef-client has executed this recipe on one or more hosts, a list of all nodes that are vulnerable to the "Shellshock" exploit can be retrieved from the Chef server via knife search:
knife search node 'bash:shellshock_vulnerable'
This cookbook relies on the OS-native packaging system to provide patched versions of the bash package.
Installs an OHAI plugin that will automatically audit nodes for the Shellshock vulnerability. This plugin creates two new values in OHAI:
node['languages']['bash']['version'], a string. Returned from bash --version.
node['languages']['bash']['shellshock_vulnerable'], a boolean. True if node is vulnerable.
Author: Cookbook Engineering Team ([email protected])
Copyright: 20014-2015, Chef Software, Inc.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.