vyatta-bash.git/parse.y, branch circinus-public-unmaintained

vyatta-bash: import patch from Redhat for CVE-2014-7169

2014-09-27T15:40:28+00:00

Import the patch from RedHat to fix CVE-2014-7169, reported following the fix for CVE-2014-6271 that didn't completely fix the issue. Original Author : Ondrej Oprala http://pkgs.fedoraproject.org/cgit/bash.git/ commit/?h=f20&id=9766d4f8827c16deaf3681bb52859bb3828bcc4b Related to Bug #324 Bug #326 http://bugzilla.vyos.net/show_bug.cgi?id=326

Another shellshock patch by Chet Ramey.

2014-09-25T22:31:28+00:00

Bugfix 6828: Make bash print a friendly message when exiting configuration mode with ctrl+d

2011-07-27T03:00:36+00:00

Update to bash-4.1

2010-10-11T22:19:40+00:00

Integrate bash 3.2 version

2010-04-09T23:15:01+00:00

This is merge of current Debian stable (Lenny) version of Bash with Vyatta changes.

Fix command auditing to work right

2010-04-09T22:57:20+00:00

The command auditing patch had a number of issues: * was looking at shell_input_line rather than what user entered * reopened audit file descriptor on each command * left audit_fd dangling in child * looked up tty on each command It still does getcwd() on each command but that probably can't be helped.

Add auditing support to bash

2010-04-05T16:48:26+00:00

This is based on earlier (unaccepted) patch to add auditing support which wasd done by Steve Grubb at Redhat. This patch depends on audit 1.4 to provide a logging function. The resulting audit message looks like this: time->Tue Jan 30 18:23:45 2007 type=USER_CMD msg=audit(1170199425.793:143): user pid=22862 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd=2F726F6F742F7465737420646972 cmd=6C73202D6C (terminal=tty1 res=success)' Which translates to: type=USER_CMD msg=audit(01/30/2007 18:23:45.793:143) : user pid=22862 uid=root auid=root subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd=/root/test dir cmd=ls -l (terminal=tty1 res=success)' This patch causes bash to log all command line arguments when the shell is started as aubash or "bash --audit". The preferred methos is to make a symlink frp, bash to aubash and then add aubash to /etc/shells. Then you can change root's shell to aubash.

remove ! and $ from vbash processing as these are handled by command scripts.

2008-08-28T18:30:29+00:00

Handle double and single quote within a command argument. First quote turns on automatic escaping, second turns off. Will support unquoted, single quoted and

2008-08-28T17:21:45+00:00

double quoted forms of text strings.

disable shell interpretation of ![num] when entering configure commands. this fixes a bug where the negation character in nat/firewall/wlb

2008-08-27T17:28:56+00:00

commands required user escaping.