bash: address recent CVEs (shellshock, etc.)

Grabbed the current, relevant bash 4.2 patches from OE dylan
and tested the various demonstration exploits found at:
https://shellshocker.net/.

OXT-7
Signed-off-by: Chris Patterson <pattersonc@ainfosec.com>
tboot: measure all command line arguments (CVE-2014-5118)

JP Blake's patch to address CVE-2014-5118.

Upstream-status: This patch was submitted upstream, but tboot took a different
approach to fixing it.  However, their fix is currently incomplete:
http://sourceforge.net/p/tboot/mailman/message/32760688/

OXT-19

Signed-off-by: Chris Patterson <pattersonc@ainfosec.com>
Merge pull request #25 from cjp256/oxt-7-v1

[OXT-7] bash: address recent CVEs (shellshock, etc.)
pseudo-xattr-support: remove invalid UNIQUE constraint

This addresses an issue where an incremental rebuild of the dom0 or
ndvm images will create an image with incorrect/missing selinux labels.

When rebuilding an image, the method used in the pseudo-xattr-support
patch tracks via dev+inode+xattrname.  But there is a UNIQUE constraint
"UNIQUE (path, xattrname)", which is invalid when a file is overwritten
because the inode changes. The other constraint,
"UNIQUE (ino, dev, xattrname)" is sufficient.

OXT-6

Signed-off-by: Chris Patterson <pattersonc@ainfosec.com>
Merge pull request #28 from cjp256/oxt-19-v1

[OXT-19] tboot: measure all command line arguments (CVE-2014-5118)
Merge pull request #27 from cjp256/oxt-6-v1

[OXT-6] pseudo-xattr-support: remove invalid UNIQUE constraint
Merge pull request #26 from flihp/master

OXT-25: Clean out build scripts