With only static content (all logic implemented via cron). $ grep nginx /etc/passwd nginx:x:105:111:nginx user,,,:/nonexistent:/bin/false And the onl

With only static content (all logic implemented via cron). $ grep nginx /etc/passwd nginx:x:105:111:nginx user,,,:/nonexistent:/bin/false And the only other service listening in this machine is SSH, but it's limited by iptables only to my home IP. I think I'm safe. Now installing updates patches bash. Anyway, I've seen that syntax before (I'm talking of years here), on #bash in freenode. Simply nobody did apply this from a security view point in the channel...