draios/sysdig — pull request #252 by TylerOderkirk (2014-09-26 21:14:47+00:00)
Title: relax pattern in shellshock_detect

catch attempts of the form illustrated at http://seclists.org/oss-sec/2014/q3/679 ie...
env X='() { (a)=>\' /bin/bash -c "/tmp/foo /usr/bin/id"
cat /tmp/foo