CONFIG_FEATURE_SUID and login

John Kelly jakelly at shtc.net
Mon Oct 31 20:17:35 UTC 2005


With busybox 1.00 (and busybox snapshot 20051030), the login applet
forces CONFIG_FEATURE_SUID, and the help text for login says "note
that Busybox binary must be setuid root for this applet to work
properly."

Is this a config/docementation bug?

When busybox is not suid root, I can still log in as a non-root user,
no matter whether busybox is configured for internal passwd and group
functions, or system passwd and group functions.


-rwxr-xr-x  127 root     root       324500 Oct 31 14:51 /bin/busybox
-rwxr-xr-x    8 root     root        34704 Oct 31 14:51 /bin/busybox.suid
-rwxr-xr-x    8 root     root        34704 Oct 31 14:51 /bin/login
-rw-r--r--    1 root     root          537 Oct 31 14:53 /etc/passwd
-rw-------    1 root     root          397 Oct 31 14:53 /etc/shadow



More information about the busybox mailing list