[git commit] setconsole: make it NOEXEC
Denys Vlasenko
vda.linux at googlemail.com
Sun Aug 6 16:56:25 UTC 2017
commit: https://git.busybox.net/busybox/commit/?id=5cb907fffc25ce26d7388b485e64261f7ee42450
branch: https://git.busybox.net/busybox/commit/?id=refs/heads/master
BTW, I failed to make it do what it meant to do.
ioctl appears to succeed, but kernel's output is not coming
to the specified console (tried on VT consoles too).
OTOH, setlogcons does work...
Signed-off-by: Denys Vlasenko <vda.linux at googlemail.com>
---
NOFORK_NOEXEC.lst | 2 +-
console-tools/setconsole.c | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index 58b3e9c..ec3b2a6 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -305,7 +305,7 @@ sed - runner
sendmail - runner
seq - noexec. runner
setarch - noexec. spawner
-setconsole
+setconsole - noexec
setfont
setkeycodes - noexec
setlogcons - noexec
diff --git a/console-tools/setconsole.c b/console-tools/setconsole.c
index fa5269e..9a8ca38 100644
--- a/console-tools/setconsole.c
+++ b/console-tools/setconsole.c
@@ -20,7 +20,7 @@
//config: default y
//config: depends on SETCONSOLE && LONG_OPTS
-//applet:IF_SETCONSOLE(APPLET(setconsole, BB_DIR_SBIN, BB_SUID_DROP))
+//applet:IF_SETCONSOLE(APPLET_NOEXEC(setconsole, setconsole, BB_DIR_SBIN, BB_SUID_DROP, setconsole))
//kbuild:lib-$(CONFIG_SETCONSOLE) += setconsole.o
More information about the busybox-cvs
mailing list