I wasn't particularly worried about Shellshock until I learned that a malicious DHCP server may be able to exploit my DHCP client to run arbitrary code on my system. It's not clear to me whether Macs are vulnerable, but if so, I want to fix it ASAP.
That said, the version of
/bin/bash on my Mac is code-signed by Apple.
$ spctl --verbose --assess --type execute /bin/bash /bin/bash: accepted source=Apple System
If I follow these instructions and replace Apple's
/bin/bash with one that I compile myself (hence not code-signed by Apple), am I setting myself up for trouble?