- Published on
How to fix Shellshock Bash Vulnerability using Chef
Two copy-paste solutions for your recipes that will:
- Make your Chef deployed servers Shellshock proof
- Display
shellshock-fix
during provisioning to make you look good as a bonus
Using package
Place anywhere after your apt-get update
action.
package 'shellshock-fix' do
package_name 'bash'
action :upgrade
end
Using execute
Place anywhere.
execute "shellshock-fix" do
command 'apt-get update && sudo apt-get install --only-upgrade bash'
action :run
end