此 Chef cookbook 包含一个默认 recipe,如果发现 bash 且该 bash 存在 CVE-2014-6271 中描述的远程利用漏洞,它将使你的 Chef 运行失败。查找 bash 的位置可在 node['bash-CVE-2014-6271']['bashes'] 属性中配置(见下文)。
应适用于任何 UNIX/Linux。如有问题请报告(最好附上补丁)。
node['bash-CVE-2014-6271']['bashes'] - 一个必需的数组,包含待检测漏洞的可能 bash 可执行文件。默认为 /bin/bash 和 /usr/local/bin/bash只需将 bash-CVE-2014-6271 添加到节点的 run_list 中:
{
"name":"my_node",
"run_list": [
"recipe[bash-CVE-2014-6271]"
]
}
add_component_x)Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.