[git commit] df: make NOEXEC

Denys Vlasenko vda.linux at googlemail.com
Mon Aug 7 20:19:17 UTC 2017


commit: https://git.busybox.net/busybox/commit/?id=fc9efcb53bf59edb47be7f25d2a374907af2e6a8
branch: https://git.busybox.net/busybox/commit/?id=refs/heads/master

Signed-off-by: Denys Vlasenko <vda.linux at googlemail.com>
---
 NOFORK_NOEXEC.lst | 4 ++--
 coreutils/df.c    | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index 6595b9d..8580593 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -92,8 +92,8 @@ deallocvt - noexec. leaks: get_console_fd_or_die() may open a new fd, or return
 delgroup - noexec. leaks
 deluser - noexec. leaks
 depmod - longterm(ish)
-devmem - runner, complex (access to device memory may hang)
-df - leaks: nested allocs
+devmem - hardware (access to device memory may hang)
+df - noexec. leaks: nested allocs
 dhcprelay - daemon
 diff - runner
 dirname - NOFORK
diff --git a/coreutils/df.c b/coreutils/df.c
index 27dd2b5..4d6534b 100644
--- a/coreutils/df.c
+++ b/coreutils/df.c
@@ -33,7 +33,7 @@
 //config:	-i Inodes
 //config:	-B <SIZE> Blocksize
 
-//applet:IF_DF(APPLET(df, BB_DIR_BIN, BB_SUID_DROP))
+//applet:IF_DF(APPLET_NOEXEC(df, df, BB_DIR_BIN, BB_SUID_DROP, df))
 
 //kbuild:lib-$(CONFIG_DF) += df.o
 


More information about the busybox-cvs mailing list