Shocktrooper: mass server patching for shellshock
1–10 of 12 posts
Re: Shocktrooper: mass server patching for shellshock
#2Neat project. ;)
Re: Shocktrooper: mass server patching for shellshock
#3I don't really understand the point of this. Aren't there already simple tools that take a list of server credentials and run the same command on all of them? (I could understand if it was made for fun but the FAQ says it's "out of necessity" and patching multiple distros can be a "nightmare". How? Just attempt to execute apt and yum everywhere.)
Though maybe I'm just disappointed that it doesn't log in via shellshock as I hoped from the title.
Re: Shocktrooper: mass server patching for shellshock
#4I don't really understand the point of this. Aren't there already simple tools that take a list of server credentials and run the same command on all of them? (I could understand if it was made for fun but the FAQ says it's "out of necessity" and patching multiple distros can be a "nightmare". How? Just attempt to execute apt and yum everywhere.) Though maybe I'm just disappointed that it doesn't log in via shellshoc…
This is the nature of "devops."
Re: Shocktrooper: mass server patching for shellshock
#5So... instead of connecting to all my servers securely and 'yum update bash'ing I can download this script that I don't trust, configure it with all my super secret passwords and let it run riot.
Re: Shocktrooper: mass server patching for shellshock
#6I don't really understand the point of this. Aren't there already simple tools that take a list of server credentials and run the same command on all of them? (I could understand if it was made for fun but the FAQ says it's "out of necessity" and patching multiple distros can be a "nightmare". How? Just attempt to execute apt and yum everywhere.) Though maybe I'm just disappointed that it doesn't log in via shellshoc…
For those wondering, "What simple tools take a list of server credentials and run the same command on all of them?", Fabric is a great one: http://www.fabfile.org/en/latest/
Re: Shocktrooper: mass server patching for shellshock
#7I don't really understand the point of this. Aren't there already simple tools that take a list of server credentials and run the same command on all of them? (I could understand if it was made for fun but the FAQ says it's "out of necessity" and patching multiple distros can be a "nightmare". How? Just attempt to execute apt and yum everywhere.) Though maybe I'm just disappointed that it doesn't log in via shellshoc…
For those wondering, "What simple tools take a list of server credentials and run the same command on all of them?", Fabric is a great one: http://www.fabfile.org/en/latest/
Thanks for the specifics!
Re: Shocktrooper: mass server patching for shellshock
#8ansible main -a "sudo apt-get update; apt-get install --upgrade-only bash"
Re: Shocktrooper: mass server patching for shellshock
#9I gotta say, if this is what you have to resort to for one single security advisory, I'm scared to think how the remaining ~weekly advisories are handled.
Re: Shocktrooper: mass server patching for shellshock
#10Shameless plug: https://commando.io provides a great way to run commands on groups of servers via SSH and a web interface for patching shellshock. We also store the result of stdout and stderr and who executed the commands for a complete audit trail.
See the following tweet: https://twitter.com/alexandermensa/status/514811145887027201