summaryrefslogtreecommitdiff
path: root/parse.y
AgeCommit message (Collapse)Author
2014-09-27vyatta-bash: import patch from Redhat for CVE-2014-7169Alex Harpin
Import the patch from RedHat to fix CVE-2014-7169, reported following the fix for CVE-2014-6271 that didn't completely fix the issue. Original Author : Ondrej Oprala <ooprala@redhat.com> http://pkgs.fedoraproject.org/cgit/bash.git/ commit/?h=f20&id=9766d4f8827c16deaf3681bb52859bb3828bcc4b Related to Bug #324 Bug #326 http://bugzilla.vyos.net/show_bug.cgi?id=326
2014-09-26Another shellshock patch by Chet Ramey.Daniil Baturin
2011-07-26Bugfix 6828: Make bash print a friendly message when exiting configuration ↵John Southworth
mode with ctrl+d
2010-10-11Update to bash-4.1Stephen Hemminger
2010-04-09Integrate bash 3.2 versionStephen Hemminger
This is merge of current Debian stable (Lenny) version of Bash with Vyatta changes.
2010-04-09Fix command auditing to work rightStephen Hemminger
The command auditing patch had a number of issues: * was looking at shell_input_line rather than what user entered * reopened audit file descriptor on each command * left audit_fd dangling in child * looked up tty on each command It still does getcwd() on each command but that probably can't be helped.
2010-04-05Add auditing support to bashStephen Hemminger
This is based on earlier (unaccepted) patch to add auditing support which wasd done by Steve Grubb at Redhat. This patch depends on audit 1.4 to provide a logging function. The resulting audit message looks like this: time->Tue Jan 30 18:23:45 2007 type=USER_CMD msg=audit(1170199425.793:143): user pid=22862 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd=2F726F6F742F7465737420646972 cmd=6C73202D6C (terminal=tty1 res=success)' Which translates to: type=USER_CMD msg=audit(01/30/2007 18:23:45.793:143) : user pid=22862 uid=root auid=root subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd=/root/test dir cmd=ls -l (terminal=tty1 res=success)' This patch causes bash to log all command line arguments when the shell is started as aubash or "bash --audit". The preferred methos is to make a symlink frp, bash to aubash and then add aubash to /etc/shells. Then you can change root's shell to aubash.
2008-08-28remove ! and $ from vbash processing as these are handled by command scripts.slioch
2008-08-28Handle double and single quote within a command argument. First quote turns ↵slioch
on automatic escaping, second turns off. Will support unquoted, single quoted and double quoted forms of text strings.
2008-08-27disable shell interpretation of ![num] when entering configure commands. ↵slioch
this fixes a bug where the negation character in nat/firewall/wlb commands required user escaping.
2008-07-25skipping whitespace at beginning of command when matching set|delete.root
2008-07-25additional special characters to trap, added back free() after additional ↵root
testing, removed generated files from project.
2008-07-24Revert "missing a free from last merge."root
This reverts commit 402da0491b06f6c837f7fe8d28aa8605423928bf.
2008-07-24missing a free from last merge.root
2008-07-24fix for bug 1283. Or partial fix. Now handle and escape special characters ↵root
in vbash shell without requiring quotes on string. only applies to set/delete commands in vbash shell. Behavior is now much closer to juniper shell behavior with special characters.
2007-11-14patched with "debian_patches" in bash_3.1dfsg-8.diff.gzAn-Cheng Huang
2007-11-12initial import from bash_3.1dfsg.orig.tar.gzAn-Cheng Huang