Will recompiling bash to avoid Shellshock cause more harm than good
I wasn't particularly worried about Shellshock until I learned that a malicious DHCP server may be able to exploit my DHCP client to run arbitrary code on my system. It's not clear to me whether Macs are vulnerable, but if so, I want to fix it ASAP.
That said, the version of /bin/bash
on my Mac is code-signed by Apple.
$ spctl --verbose --assess --type execute /bin/bash
/bin/bash: accepted
source=Apple System
If I follow these instructions and replace Apple's /bin/bash
with one that I compile myself (hence not code-signed by Apple), am I setting myself up for trouble?
Macs don't use Bash for DHCP, so that particular vulnerability does not apply. Unless you run a vulnerable web server or have restricted remote access accounts, it's not worth the trouble to recompile Bash on OS X.